aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* do not use default empty array, as puppet evaluate this as "true" andMichael Scherer2010-11-241-3/+3
| | | | therefore create the post-commit scripts with invalid values
* - improve error message when trying to get a interactive shellMichael Scherer2010-11-241-1/+5
|
* restrict login to people of the group mga-commiters ( previous try wasMichael Scherer2010-11-242-9/+13
| | | | not working with ssh key )
* s/commiters/committers/, to be in sync with the ldap group name and the ↵Michael Scherer2010-11-243-5/+5
| | | | dictionnary
* move the group restriction at the top of the file, or they are uselessMichael Scherer2010-11-241-7/+7
|
* pam_wheel is made to be used with su only. pam_succeed_if seems to be the ↵Michael Scherer2010-11-241-2/+2
| | | | proper module
* remove empty line from the result file ( <% vs <%- )Michael Scherer2010-11-241-4/+4
|
* use FQDN for repositoryOlivier Blin2010-11-241-1/+1
|
* fix homedir usageOlivier Blin2010-11-241-2/+2
|
* if we use cache, make it use /home/iurt/cache instead of /home/iurt_cacheOlivier Blin2010-11-241-1/+1
|
* extract homedirOlivier Blin2010-11-241-4/+5
|
* update comment as wellOlivier Blin2010-11-241-1/+1
|
* extract repository variableOlivier Blin2010-11-241-1/+2
|
* - activate ldap only accessMichael Scherer2010-11-241-0/+3
|
* use http repositoryOlivier Blin2010-11-231-1/+1
|
* fix permissions on tagmail.confMichael Scherer2010-11-231-3/+3
|
* the previous trick didn't work as tags are dependent in the order ofMichael Scherer2010-11-234-25/+29
| | | | declaration ( and that's bad (tm) ). This one is safer.
* move the ldap key from ssh logic to openssh module ( more logical ), and add ↵Michael Scherer2010-11-233-37/+44
| | | | the hook in openssh config file
* link root keys in the /var/lib/pubkeys ( easier than to change the location ↵Michael Scherer2010-11-231-0/+12
| | | | of root keys deployed by puppet )
* simplify nodes declarationOlivier Blin2010-11-231-26/+22
|
* use same iurt command for both i586 and x86_64Olivier Blin2010-11-231-2/+2
|
* fix upload.conf name (oops)Olivier Blin2010-11-231-1/+1
|
* emi is more a gatherer than a dispatcherOlivier Blin2010-11-231-2/+2
|
* add iurt upload.conf file for ulri and emiOlivier Blin2010-11-232-0/+73
|
* move /etc/iurt creation with iurt user (rationale: if there is a iurt user, ↵Olivier Blin2010-11-231-4/+4
| | | | iurt tools will be used)
* create /etc/iurtOlivier Blin2010-11-231-1/+5
|
* manage dir recursivelyOlivier Blin2010-11-231-0/+1
|
* ensure /etc/iurt/build is a directoryOlivier Blin2010-11-231-0/+5
|
* iurt build config should go in /etcOlivier Blin2010-11-231-1/+1
|
* ssh user requires the associated groupOlivier Blin2010-11-231-0/+1
|
* add correct requires for sshuser creationOlivier Blin2010-11-231-0/+2
|
* automatically pull apache::base to be consistant with others defineMichael Scherer2010-11-231-0/+1
|
* - do not include apache::mod_fcgid as bugzilla do not use fast cgi, and ↵Michael Scherer2010-11-231-1/+0
| | | | apache::base is already included
* Allow users to write their own sshPublicKey, and all users to read itBuchan Milne2010-11-231-1/+1
|
* remove unneeded commasOlivier Blin2010-11-231-1/+1
|
* add jonund and fix adressesOlivier Blin2010-11-231-1/+3
|
* allow repository http acces from buildsystem nodesOlivier Blin2010-11-231-0/+2
| | | | | (hardcoding their IPv6 address since we have no reverse lookup on them)
* add filter compilation as this can reduce the load on serverMichael Scherer2010-11-232-1/+13
|
* no one here want receive a mail when we are hot by a virus, I thinkMichael Scherer2010-11-231-1/+1
|
* - add spamassassin moduleMichael Scherer2010-11-232-0/+107
|
* - add the start of a amavis module ( to interface postfix with spamassassin )Michael Scherer2010-11-232-0/+801
|
* - it is IMHO cleaner and logical to have apache::vhost_other_app directly ↵Michael Scherer2010-11-232-1/+1
| | | | requiring apache::base rather than letting every people adding it when using the class
* - add a comment so I do not have the impression to haveMichael Scherer2010-11-231-2/+6
| | | | lost 4h on debugging pam_ldap and openssh
* class was renamed 3 commits agoMichael Scherer2010-11-231-1/+1
|
* add class for scp and sftpMichael Scherer2010-11-232-0/+14
|
* - split the module in 2 part, and add class to allow to more easylyMichael Scherer2010-11-232-17/+44
| | | | combine the autorized shell
* - use pam for openssh ( I am not sure if we need to restrict its useMichael Scherer2010-11-231-1/+1
| | | | only on ldap hosts )
* - rewrite restricted_shell, and split the shell in its own subclassMichael Scherer2010-11-232-53/+54
|
* include apache::baseOlivier Blin2010-11-221-1/+1
|
* fix typoOlivier Blin2010-11-221-1/+1
|