summaryrefslogtreecommitdiffstats
path: root/src/defs-nis.c
Commit message (Collapse)AuthorAgeFilesLines
* nis: lock out accounts if nsAccountLock is TRUEAlexander Bokovoy2016-01-261-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a rule that adds two bang characters in front of the password. When the password algorithm is defined as CRYPT and NIS is used to authenticate users on other systems, there is no way to disable or lock accounts. Traditional convention has been to put two bang (exclamation) characters in front of the password, creating an impossible password hash. This effectively locks the user account, preventing authentication. All UNIX systems agree that for encrypted passwords presence of a character which cannot be part of CRYPT password scheme renders impossible to login to system with such password. However, not all systems have meaning of locked accounts and even how these locked accounts express themselves. There is certain controversy in what could be used to indicate locked accounts: - GNU/Linux systems expect '!' as first character of the password field - FreeBSD expects '*LOCKED*' string at start of the password field - Various Solaris versions expect '*LOCK*' string at start of the password field - NetBSD has no meaning of locked passwords via content of password field Given that it is impossible to serve NIS maps with encrypted passwords in a different way to different clients, standardize on '!!' scheme as traditional among UNIX administrators. Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1298478
* Correct the NIS defaults for "hosts" mapsNalin Dahyabhai2014-04-221-4/+4
| | | | | The values for NIS hosts.byname and hosts.byaddr maps should start with addresses, not names. Reported by Rik Megens.
* add shadow, passwd.adjuct, base64-encode nis-disallowed-charsNalin Dahyabhai2012-08-231-4/+67
| | | | | | | * add a definition for shadow.byname * add a definition for passwd.adjunct.byname * make passwd.byname/passwd.byuid hide userPassword if objectClass==shadowAccount * base64-encode nis-disallowed-chars when we are printing defaults
* - modify defaults for ethers.byname and ethers.byaddr so that they'll work ↵Nalin Dahyabhai2012-01-241-6/+10
| | | | properly with multiple macAddress and cn values
* whitespace fixupsNalin Dahyabhai2012-01-131-5/+5
|
* - first pass at handling multivalue ethers records correctlyNalin Dahyabhai2012-01-131-4/+4
|
* - remove use of 'memberOf' for computing members of the group.byname andNalin Dahyabhai2012-01-061-3/+3
| | | | | | group.bygid maps; in IPA, the memberOf plugin ensures that it's only ever going to have redundant data, so there's nothing to be gained by examining the relationships from that end
* - use regsubi() rather than regsub() to match {crypt} hashesNalin Dahyabhai2012-01-041-4/+4
|
* - handle control characters in disallowed-chars listsNalin Dahyabhai2011-07-261-5/+5
|
* - make the defaults use recursive support for attribute valuesNalin Dahyabhai2009-03-041-4/+4
|
* - move config.h into src/Nalin Dahyabhai2008-10-241-1/+1
|
* - require that UIDs and GIDs look like numbersNalin Dahyabhai2008-08-061-3/+3
|
* format.c:Nalin Dahyabhai2008-08-061-4/+4
| | | | | | | - make %format() expect a specifier as the value to match against, and the default to use if there are no / too many matches defs-nis.c: - compensate
* - fix "networks" defaultsNalin Dahyabhai2008-07-311-10/+10
| | | | | - remember that \t doesn't expand to anything, and the files only use whitespace, so just use spaces already
* - fixup defaults for mail alias mapsNalin Dahyabhai2008-07-311-3/+3
|
* - fix ethers defaultsNalin Dahyabhai2008-07-311-8/+8
| | | | - note that defaults for mail, netgroup, and networks still need work
* - tweak defaults so that we can serve services mapsNalin Dahyabhai2008-07-301-5/+6
|
* - add tracking of default values-format settingsNalin Dahyabhai2008-07-301-30/+45
|
* - tweak some defaultsNalin Dahyabhai2008-07-151-19/+26
|
* - remove unused argumentsNalin Dahyabhai2008-07-141-2/+1
|
* - make %first() take a pattern and not a literalNalin Dahyabhai2008-07-141-6/+6
|
* - add the ability to specify a default base, specifically for 'ypservers'Nalin Dahyabhai2008-07-091-24/+46
|
* - add a way to pull out specific map defaultsNalin Dahyabhai2008-07-091-6/+20
|
* - clarify that the domain is meant to be replacedNalin Dahyabhai2008-07-091-3/+4
| | | | - default to _PATH_BSHELL for %{loginShell}
* - add a way to print out the values we hard-code for map default settingsNalin Dahyabhai2008-07-091-9/+76
| | | | - correct for %list() being gone now
* - update to make use of the newer function setupNalin Dahyabhai2008-07-071-3/+3
|
* - rename backend and defaults, tooNalin Dahyabhai2008-06-301-0/+233
generated by cgit (git 2.34.1) at 2025-08-28 12:22:30 +0000