aboutsummaryrefslogtreecommitdiffstats
path: root/modules/openldap
Commit message (Collapse)AuthorAgeFilesLines
* fix ordering issuesMichael Scherer2011-09-191-0/+1
|
* fix last commit, use the proper syntax for ressource inheritanceMichael Scherer2011-08-171-6/+6
|
* fix inheritance ( worked by chance before )Michael Scherer2011-08-171-36/+33
|
* fix orderingMichael Scherer2011-08-171-0/+1
|
* fix again wrong quotesMichael Scherer2011-05-291-1/+1
|
* fix typo due to my old packager habits of using requires instead of requireMichael Scherer2011-05-291-1/+1
|
* workaround problem on 2010.0 , where kolab schema conflict withMichael Scherer2011-05-291-1/+4
| | | | another one we use
* add explicit requires to the cert so we do not try to start without itMichael Scherer2011-05-291-0/+1
|
* add explicit inheritance with common, as it seems to notMichael Scherer2011-05-291-0/+2
| | | | work as I believe for this case ( do not have time to figure more toroughly )
* fix user used for synchronisationMichael Scherer2011-05-291-1/+1
|
* fix syntax errorsMichael Scherer2011-05-291-2/+3
|
* fix the path of the ssl certificateMichael Scherer2011-05-292-4/+4
|
* fix wrong variable ( s/dc_domain/dc_suffix/ )Michael Scherer2011-05-291-2/+2
|
* add a slave class to create a 2nd ldapMichael Scherer2011-05-292-0/+36
|
* move the monitor db at the beggining of the file, so we canMichael Scherer2011-05-291-6/+6
| | | | add syncrepl config to the end of the db
* split the configuration for the test database in another file ( to prepare ↵Michael Scherer2011-05-293-10/+11
| | | | for slave server )
* - deploy dynlist overlay, so we can create dynamic group ( needed for i18n ↵Michael Scherer2011-04-211-0/+4
| | | | svn access )
* Give group owner access (read - including search - and write) to owner attributeBuchan Milne2011-02-201-1/+1
|
* Index owner attributeBuchan Milne2011-02-201-1/+1
|
* - add right to users to do a CMP against group member,Michael Scherer2011-02-191-1/+1
| | | | | as the django plugin to auth against ldap ( used by transifex ) use this to determine group membership and fail if the access is not sufficient
* Let users modify their namesBuchan Milne2011-02-161-1/+1
|
* add a secondary ldap tree for testing purpose, requested by maatMichael Scherer2011-01-232-0/+19
|
* Change ACL for non-privileged users to not work on reset model, instead allowBuchan Milne2011-01-221-2/+2
| | | | | registrars to change unprivileged passwords directly
* - rename base class, more consistentMichael Scherer2011-01-061-2/+2
|
* ensure that email are unique at ldap levelMichael Scherer2010-12-171-0/+3
|
* - do not let user change their own memberOf attribute, ( even if the overlay ↵Michael Scherer2010-12-161-1/+6
| | | | may prevent it )
* let users see who is in another group ( needed for sympa )Michael Scherer2010-12-141-1/+1
|
* allow users to read memberof, and use overlay to keep the changes in syncMichael Scherer2010-12-102-1/+4
|
* since the domain name is not added automatically by openssl module, addMichael Scherer2010-11-301-1/+1
| | | | it here
* Allow users to write their own sshPublicKey, and all users to read itBuchan Milne2010-11-231-1/+1
|
* Fix host access to posixAccount attrsBuchan Milne2010-11-221-1/+1
|
* - add proper access to nss_ldap user so pam_ldap auth can workMichael Scherer2010-11-221-0/+7
|
* - do not hardcode mageia.org in aclMichael Scherer2010-11-221-57/+57
|
* - use new class for openssl certsMichael Scherer2010-11-211-4/+2
|
* - create a self signed certificate if not present ( for test vm )Michael Scherer2010-11-211-0/+13
|
* - do not let file with passwords to be world readable Michael Scherer2010-11-201-7/+1
| | | | | | | | ( even if being readable by apache is not good either, but needed as the password is used by apache ) - use ldaps for sympa - use the 2 new facter macro and remove the version copied everywhere - remove hardcoded domain in bugzilla and others
* Close more anon access, and open up read access to some inetOrgPerson attrs ↵Buchan Milne2010-11-091-11/+13
| | | | to users
* - replace hardcoded domain by a variable, to ease reuse of the module Michael Scherer2010-11-091-11/+13
|
* Allow a bit more access to groupsBuchan Milne2010-11-051-1/+1
|
* Try and allow users to identify the groups another user is inBuchan Milne2010-11-051-1/+5
|
* Give registrar group read access to some attributes again, and reduce users ↵Buchan Milne2010-11-051-2/+2
| | | | | | | access added in previous commit
* Open read access for users to contact-type details for nowBuchan Milne2010-11-051-1/+1
|
* Catdap needs some search access as wellBuchan Milne2010-11-051-3/+3
| | | | | Also allow catdap to write preferredLanguage
* Finalise registration ACLsBuchan Milne2010-11-053-12/+23
| | | | | | | | | Restrict anonymous access (to none) Add some additional ACLs to put back some access that previously relied on anonymous Listen on all IP addresses, and ldapi Assign localSSF matching ssf requirement, so we allow ldapi,ldaps,ldap+start_tls
* ACLs:Buchan Milne2010-11-042-4/+23
| | | | | | | | | | Add ACLs required for self-registration application to registrar system group Allow Account admins to unlock accounts (write to pwdAccountLockedTime) Allow users to update their email address and preferredLanguage Schema: Switch to rfc2307bis (replacing nis.schema and autofs.schema) Add LPK
* - add ldap config file, with ldap restricted to localhost (until we set a ↵Michael Scherer2010-10-292-0/+51
| | | | firewall or stricter acl)
* - fix the config file so it work on x86_64 and x86Michael Scherer2010-10-291-1/+5
|
* -fix templates namingMichael Scherer2010-10-281-1/+1
|
* - deploy ldap with puppet on valstarMichael Scherer2010-10-283-0/+298
generated by cgit v1.2.1 (git 2.21.0) at 2024-11-07 15:23:01 +0000