summaryrefslogtreecommitdiffstats
path: root/install/share/default-aci.ldif
Commit message (Expand)AuthorAgeFilesLines
* aci: replace per-server ACIs with ipaserver-based ACIsJan Cholasta2015-12-071-11/+0
* Add usercertificate attribute to user pluginFraser Tweedale2015-06-041-0/+1
* keytab: Add new extended operation to get a keytab.Simo Sorce2014-06-261-0/+7
* Add support for managedBy to tokensNathaniel McCallum2014-06-161-5/+6
* Remove the global anonymous read ACIPetr Viktorin2014-05-261-13/+0
* aci-update: Trim the admin write blacklistPetr Viktorin2014-04-251-3/+0
* Add HOTP supportNathaniel McCallum2014-02-211-1/+2
* Update ACIs to permit users to add/delete their own tokensNathaniel McCallum2014-02-131-0/+1
* acl: Remove krbPrincipalExpiration from list of admin's excluded attrsTomas Babej2014-01-141-1/+1
* Do not add kadmin/changepw ACIs on new installsMartin Kosek2013-10-251-1/+0
* Permit reads to ipatokenRadiusProxyUser objectsNathaniel McCallum2013-07-111-1/+1
* Add IPA OTP schema and ACLsNathaniel McCallum2013-05-171-1/+9
* Add Kerberos ticket flags management to service and host plugins.Jan Cholasta2013-03-291-1/+1
* Update anonymous access ACI to protect secret attributes.Rob Crittenden2013-01-231-1/+1
* Use certmonger to renew CA subsystem certificatesRob Crittenden2012-07-301-0/+10
* Remove ipaNTHash from global allow ACIMartin Kosek2012-06-261-4/+4
* Add LDAP ACIs for SSH public key schema.Jan Cholasta2012-02-131-0/+3
* install: Remove uid=kdc userSimo Sorce2011-08-261-4/+0
* Change the way has_keytab is determined, also check for password.Rob Crittenden2011-08-241-0/+8
* Make main selfservice aci visible to the selfservice plugin.Rob Crittenden2011-02-101-2/+2
* Add support for tracking and counting entitlementsRob Crittenden2011-02-021-1/+1
* Add support for account unlockingJan Zeleny2011-01-281-1/+1
* block anonymous access to sudo info https://fedorahosted.org/freeipa/ticket/865Jr Aquino2011-01-271-0/+6
* ACI plugin supports prefixesMartin Kosek2011-01-261-1/+1
* Block anonymous access to HBAC, role and some member information.Rob Crittenden2011-01-241-0/+6
* Remove radius options completely.Simo Sorce2011-01-141-6/+0
* Allow the kdc to write krbExtraDataRob Crittenden2011-01-071-1/+1
* Remove common entries when deleting a master.Simo Sorce2010-12-211-0/+5
* Don't use camel-case LDAP attributes in ACI and don't clear enrolledByRob Crittenden2010-12-171-3/+3
* Set labels on all attributes in the config object.Rob Crittenden2010-12-101-1/+1
* Re-implement access control using an updated model.Rob Crittenden2010-12-011-0/+5
* Reduce the number of attributes a host is allowed to write.Rob Crittenden2010-11-301-2/+6
* Give a detached group a full set of group objectclasses.Rob Crittenden2010-11-191-1/+1
* Add managedby to Host entriesRob Crittenden2010-11-191-0/+8
* Revoke a host's certificate (if any) when it is deleted or disabled.Rob Crittenden2010-11-191-1/+1
* Disallow writes on serverHostName and memberOfRob Crittenden2010-10-221-2/+1
* Fix a couple of typos in some ACIs.Rob Crittenden2010-10-061-3/+3
* Remove reliance on the name 'admin' as a special user.Rob Crittenden2010-10-011-1/+1
* Unenroll the client from the IPA server on uninstall.Rob Crittenden2010-09-201-1/+2
* Set ipaUniqueId to be unwritable and add to uniqueness configuration.Rob Crittenden2010-09-201-2/+2
* Enable a host to retrieve a keytab for all its services.Rob Crittenden2010-08-161-1/+3
* - allow the KDC to read krbCanonicalNameNalin Dahyabhai2010-02-051-2/+2
* Make hosts more like real services so we can issue certs for host principalsRob Crittenden2009-12-161-0/+6
* Make the IPA server host and its services "real" IPA entriesRob Crittenden2009-12-111-1/+1
* Use a new mechanism for delegating certificate issuance.Rob Crittenden2009-11-031-0/+7
* Mass tree reorganization for IPAv2. To view previous history of files use:Rob Crittenden2009-02-031-0/+38
generated by cgit (git 2.34.1) at 2025-02-27 05:08:43 +0000