| Commit message (Expand) | Author | Age | Files | Lines |
* | manage /etc/openldap/ldap.conf by puppet | Michael Scherer | 2012-02-15 | 2 | -0/+27 |
* | clean nscd service | Michael Scherer | 2012-02-15 | 1 | -2/+1 |
* | cleanup and refactoring of pam module | Michael Scherer | 2012-01-08 | 1 | -46/+23 |
* | we do not use mdns on servers, so remove it as it seems to cause trouble | Michael Scherer | 2011-05-24 | 1 | -1/+1 |
* | fix wrong class name | Michael Scherer | 2011-01-13 | 1 | -1/+1 |
* | - allow to set access without forcing the restricted shell ( should | Michael Scherer | 2011-01-13 | 2 | -2/+5 |
* | move the type of access_class to deployment ( as this is tied to our group na... | Michael Scherer | 2011-01-13 | 1 | -26/+0 |
* | allow to use multiple group for the access with pam | Michael Scherer | 2011-01-13 | 2 | -11/+21 |
* | restrict login to people of the group mga-commiters ( previous try was | Michael Scherer | 2010-11-24 | 2 | -9/+13 |
* | s/commiters/committers/, to be in sync with the ldap group name and the dicti... | Michael Scherer | 2010-11-24 | 2 | -4/+4 |
* | move the group restriction at the top of the file, or they are useless | Michael Scherer | 2010-11-24 | 1 | -7/+7 |
* | pam_wheel is made to be used with su only. pam_succeed_if seems to be the pro... | Michael Scherer | 2010-11-24 | 1 | -2/+2 |
* | remove empty line from the result file ( <% vs <%- ) | Michael Scherer | 2010-11-24 | 1 | -4/+4 |
* | - add a comment so I do not have the impression to have | Michael Scherer | 2010-11-23 | 1 | -2/+6 |
* | class was renamed 3 commits ago | Michael Scherer | 2010-11-23 | 1 | -1/+1 |
* | - rewrite restricted_shell, and split the shell in its own subclass | Michael Scherer | 2010-11-23 | 1 | -0/+1 |
* | Add timelimits for nss_ldap, enable password policy | Buchan Milne | 2010-11-22 | 1 | -1/+3 |
* | - set the ldap password in /etc/ldap.secret | Michael Scherer | 2010-11-22 | 1 | -1/+8 |
* | - make sure nscd is installed and running | Michael Scherer | 2010-11-22 | 1 | -1/+6 |
* | - use the rootbinddn as preconized by buchan ( and let all access goes | Michael Scherer | 2010-11-22 | 1 | -2/+2 |
* | - use the first pass if proposed ( or pam ask the password 2 times ) | Michael Scherer | 2010-11-22 | 1 | -1/+1 |
* | - add default password of x, so manifests do not fail on test vms | Michael Scherer | 2010-11-22 | 1 | -1/+1 |
* | - add nssldap password handling | Michael Scherer | 2010-11-22 | 2 | -1/+5 |
* | - ldaps is required ( ie no unencrypted connection ) | Michael Scherer | 2010-11-22 | 1 | -1/+1 |
* | - remove erronous line ( and uneeded ), as this cause error when applying abo... | Michael Scherer | 2010-11-22 | 1 | -2/+0 |
* | - pam_mkhomedir is in pam, not in a separate rpm | Michael Scherer | 2010-11-22 | 1 | -1/+1 |
* | - do not let file with passwords to be world readable | Michael Scherer | 2010-11-20 | 1 | -3/+0 |
* | - fix templates ( again ) | Michael Scherer | 2010-11-17 | 2 | -1/+30 |
* | - fix templates | Michael Scherer | 2010-11-17 | 2 | -1/+25 |
* | - better use heritance | Michael Scherer | 2010-11-17 | 1 | -13/+15 |
* | - add a proto module for taking care of pam ( need pam_ldap, etc support, and... | Michael Scherer | 2010-11-17 | 2 | -0/+62 |