index
:
freeipa.git
30gatepo
4-2-trust-fixes
ad-work
adwork
dns-records
gssapi-delegate
hbactest
hbactester
ipa-2-1
ipautil-refactor
kdc-fixes
master
my-master
network-fixes
oneway-trust
platform
platform-master
systemd-ipa-2-1
systemd-master
test-patches-2-1
testing
testotp
ticket-1259
ticket-1368
ticket-1369
ticket-1369-lite
ticket-1373
ticket-1476
ticket-1549
ticket-hbac-test
trusts-master
views
FreeIPA project
Alexander Bokovoy
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
install
/
updates
/
40-delegation.update
Commit message (
Expand
)
Author
Age
Files
Lines
*
Use certmonger to renew CA subsystem certificates
Rob Crittenden
2012-07-30
1
-0
/
+4
*
Add automount map/key update permissions
Martin Kosek
2012-07-10
1
-0
/
+21
*
Don't allow "Modify Group membership" permission to manage admins
Rob Crittenden
2012-02-23
1
-0
/
+4
*
Limit the change password permission so it can't change admin passwords
Rob Crittenden
2012-02-20
1
-0
/
+5
*
Add LDAP ACIs for SSH public key schema.
Jan Cholasta
2012-02-13
1
-0
/
+21
*
Add SELinux user mapping framework.
Rob Crittenden
2011-12-09
1
-0
/
+38
*
Reorder privileges so that memberof for permissions are generated properly.
Rob Crittenden
2011-12-08
1
-21
/
+20
*
Fix DNS permissions and membership in privileges
Rob Crittenden
2011-10-09
1
-0
/
+6
*
Disallow direct modifications to enrolledBy.
Rob Crittenden
2011-07-14
1
-0
/
+4
*
Allow a client to enroll using principal when the host has a OTP
Rob Crittenden
2011-03-30
1
-0
/
+18
*
Use Sudo rather than SUDO as a label.
Rob Crittenden
2011-03-01
1
-39
/
+39
*
Add default roles and permissions for HBAC, SUDO and pw policy
Rob Crittenden
2011-02-22
1
-0
/
+224
*
Add permission/privilege for updating IPA configuration.
Rob Crittenden
2011-02-14
1
-0
/
+18
*
Re-implement access control using an updated model.
Rob Crittenden
2010-12-01
1
-732
/
+0
*
Reduce the number of attributes a host is allowed to write.
Rob Crittenden
2010-11-30
1
-2
/
+2
*
Remove hardcoded domain value and replace with $SUFFIX
Rob Crittenden
2010-11-04
1
-3
/
+3
*
Use correct attribute name, nshostlocation, not location.
Rob Crittenden
2010-11-03
1
-1
/
+1
*
Use correct description in hostgroup acis.
Rob Crittenden
2010-10-06
1
-3
/
+3
*
Remove reliance on the name 'admin' as a special user.
Rob Crittenden
2010-10-01
1
-1
/
+1
*
Allow decoupling of user-private groups.
Rob Crittenden
2010-08-10
1
-8
/
+8
*
Add container and initial ACIs for entitlement support
Rob Crittenden
2010-07-29
1
-0
/
+37
*
Add separate role group for enrolling hosts, enrollhost
Rob Crittenden
2010-06-22
1
-0
/
+8
*
Use GSSAPI auth for the ipa-replica-manage list and del commands.
Rob Crittenden
2010-03-19
1
-0
/
+37
*
First pass at enforcing certificates be requested from same host
Rob Crittenden
2009-10-21
1
-5
/
+37
*
Fix ACI for host delegation
Rob Crittenden
2009-10-17
1
-2
/
+2
*
Fix an oops where I forgot to replace a string with a template
Rob Crittenden
2009-10-17
1
-6
/
+6
*
Use nestedgroup instead of groupofnames for rolegroups so we have memberof
Rob Crittenden
2009-10-12
1
-50
/
+50
*
Enrollment for a host in an IPA domain
Rob Crittenden
2009-09-24
1
-5
/
+26
*
Implement support for non-LDAP-based actions that use the LDAP ACI subsystem.
Rob Crittenden
2009-07-10
1
-0
/
+139
*
Basic changes to get a default principal for DNS
Simo Sorce
2009-07-10
1
-0
/
+20
*
Fix quoting to work with new csv handler in ldapupdate
Rob Crittenden
2009-05-19
1
-94
/
+95
*
Add taskgroup and ACI for writing host principal keys (so ipa-getkeytab works)
Rob Crittenden
2009-05-19
1
-0
/
+15
*
Fill in the ACIs and taskgroups for most of the plugins.
Rob Crittenden
2009-04-01
1
-13
/
+311
*
Name update files so they can be easily sorted.
Rob Crittenden
2009-03-25
1
-0
/
+124