summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/plugins/update_anonymous_aci.py
Commit message (Collapse)AuthorAgeFilesLines
* ACIs for HOTP supportAlexander Bokovoy2014-02-111-1/+1
|
* Convert remaining update code to LDAPEntry API.Jan Cholasta2014-01-241-2/+2
|
* Do not fail upgrade if the global anonymous read ACI is not foundPetr Viktorin2013-10-041-2/+6
| | | | | | This helps forward compatibility: the anon ACI is scheduled for removal. https://fedorahosted.org/freeipa/ticket/3956
* Permit reads to ipatokenRadiusProxyUser objectsNathaniel McCallum2013-07-111-1/+1
| | | | | | This fixes an outstanding permissions issue from the OTP work. https://fedorahosted.org/freeipa/ticket/3693
* Add IPA OTP schema and ACLsNathaniel McCallum2013-05-171-7/+18
| | | | | | | | | | This commit adds schema support for two factor authentication via OTP devices, including RADIUS or TOTP. This schema will be used by future patches which will enable two factor authentication directly. https://fedorahosted.org/freeipa/ticket/3365 http://freeipa.org/page/V3/OTP
* Update anonymous access ACI to protect secret attributes.Rob Crittenden2013-01-231-0/+81
Update anonymous access ACI so that no users besides Trust Admins users can read AD Trust key attributes (ipaNTTrustAuthOutgoing, ipaNTTrustAuthIncoming). The change is applied both for updated IPA servers and new installations.