summaryrefslogtreecommitdiffstats
path: root/install/updates/40-delegation.update
Commit message (Expand)AuthorAgeFilesLines
* Add a privilege and a permission needed for automember rebuild commandAna Krivokapic2013-11-151-0/+19
* Add missing permissions to Host Administrators privilegeAna Krivokapic2013-04-241-0/+8
* Update sudocmd ACIs to use targetfilterPetr Viktorin2013-02-201-3/+8
* Use certmonger to renew CA subsystem certificatesRob Crittenden2012-07-301-0/+4
* Add automount map/key update permissionsMartin Kosek2012-07-101-0/+21
* Don't allow "Modify Group membership" permission to manage adminsRob Crittenden2012-02-231-0/+4
* Limit the change password permission so it can't change admin passwordsRob Crittenden2012-02-201-0/+5
* Add LDAP ACIs for SSH public key schema.Jan Cholasta2012-02-131-0/+21
* Add SELinux user mapping framework.Rob Crittenden2011-12-091-0/+38
* Reorder privileges so that memberof for permissions are generated properly.Rob Crittenden2011-12-081-21/+20
* Fix DNS permissions and membership in privilegesRob Crittenden2011-10-091-0/+6
* Disallow direct modifications to enrolledBy.Rob Crittenden2011-07-141-0/+4
* Allow a client to enroll using principal when the host has a OTPRob Crittenden2011-03-301-0/+18
* Use Sudo rather than SUDO as a label.Rob Crittenden2011-03-011-39/+39
* Add default roles and permissions for HBAC, SUDO and pw policyRob Crittenden2011-02-221-0/+224
* Add permission/privilege for updating IPA configuration.Rob Crittenden2011-02-141-0/+18
* Re-implement access control using an updated model.Rob Crittenden2010-12-011-732/+0
* Reduce the number of attributes a host is allowed to write.Rob Crittenden2010-11-301-2/+2
* Remove hardcoded domain value and replace with $SUFFIXRob Crittenden2010-11-041-3/+3
* Use correct attribute name, nshostlocation, not location.Rob Crittenden2010-11-031-1/+1
* Use correct description in hostgroup acis.Rob Crittenden2010-10-061-3/+3
* Remove reliance on the name 'admin' as a special user.Rob Crittenden2010-10-011-1/+1
* Allow decoupling of user-private groups.Rob Crittenden2010-08-101-8/+8
* Add container and initial ACIs for entitlement supportRob Crittenden2010-07-291-0/+37
* Add separate role group for enrolling hosts, enrollhostRob Crittenden2010-06-221-0/+8
* Use GSSAPI auth for the ipa-replica-manage list and del commands.Rob Crittenden2010-03-191-0/+37
* First pass at enforcing certificates be requested from same hostRob Crittenden2009-10-211-5/+37
* Fix ACI for host delegationRob Crittenden2009-10-171-2/+2
* Fix an oops where I forgot to replace a string with a templateRob Crittenden2009-10-171-6/+6
* Use nestedgroup instead of groupofnames for rolegroups so we have memberofRob Crittenden2009-10-121-50/+50
* Enrollment for a host in an IPA domainRob Crittenden2009-09-241-5/+26
* Implement support for non-LDAP-based actions that use the LDAP ACI subsystem.Rob Crittenden2009-07-101-0/+139
* Basic changes to get a default principal for DNSSimo Sorce2009-07-101-0/+20
* Fix quoting to work with new csv handler in ldapupdateRob Crittenden2009-05-191-94/+95
* Add taskgroup and ACI for writing host principal keys (so ipa-getkeytab works)Rob Crittenden2009-05-191-0/+15
* Fill in the ACIs and taskgroups for most of the plugins.Rob Crittenden2009-04-011-13/+311
* Name update files so they can be easily sorted.Rob Crittenden2009-03-251-0/+124
generated by cgit (git 2.34.1) at 2024-05-26 09:09:45 +0000