Rob Crittenden 6e7729726f Block anonymous access to HBAC, role and some member information. ...

Prevents an unauthenticated user from accessing HBAC and role
information as well as memberof which could disclose roles,
memberships in HBAC, etc.

ticket 811

2011-01-24 14:33:21 -05:00

..

05rfc2247.ldif

Incorporate new schema for IPAv2

2009-02-11 17:13:41 -05:00

60basev2.ldif

Remove group nesting from the HBAC service groups

2010-10-28 17:34:34 -04:00

60ipaconfig.ldif

Make ipaDefaultLoginShell use IA5String syntax to match POSIX schema.

2011-01-11 10:21:04 -05:00

60ipasudo.ldif

Rename 60sudo.ldif to 60ipasudo.ldif to not overwrite the 389-ds version.

2010-11-09 13:30:45 -05:00

60kerberos.ldif

Use kerberos password policy.

2010-11-01 14:15:42 -04:00

60policyv2.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

60samba.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

anonymous-vlv.ldif

Let anonymous users browse the VLV index

2009-07-10 16:45:45 -04:00

bind.named.conf.template

named.conf: Add trailing dot to the fake_mname

2010-05-06 10:27:21 -04:00

bind.zone.db.template

Add new DNS install argument for setting the zone mgr e-mail addr.

2010-09-23 12:00:12 -04:00

bootstrap-template.ldif

Move HBAC services and service groups to cn=hbac

2011-01-18 11:48:57 -05:00

caJarSigningCert.cfg.template

Add signing profile to CA installation so we can sign the firefox jar file.

2009-05-04 16:54:42 -04:00

certmap.conf.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

default-aci.ldif

Block anonymous access to HBAC, role and some member information.

2011-01-24 14:33:21 -05:00

default-hbac.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

default-keytypes.ldif

pwd-plugin: Always use a special salt by default.

2010-10-28 17:18:03 -04:00

default-pwpolicy.ldif

Use kerberos password policy.

2010-11-01 14:15:42 -04:00

delegation.ldif

Block anonymous access to HBAC, role and some member information.

2011-01-24 14:33:21 -05:00

dna.ldif

id ranges: change DNA configuration

2010-11-22 12:42:16 -05:00

dns.ldif

Move permissions and privileges to their own container, cn=pbac,$SUFFIX

2010-12-22 11:26:49 -05:00

ds-nfiles.ldif

Autotune directory server to use a greater number of files

2010-11-22 12:42:16 -05:00

encrypted_attribute.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

entryusn.ldif

Enable EntryUSN plugin by default, with global scope

2010-11-30 18:26:40 -05:00

fedora-ds.init.patch

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

host_nis_groups.ldif

Move mep templates under cn=etc

2011-01-14 14:06:56 -05:00

indices.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

kdc_extensions.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc_req.conf.template

Add support for configuring KDC certs for PKINIT

2010-11-18 15:09:36 -05:00

kdc.conf.template

Restrict anonymous tgts

2011-01-12 17:20:09 -05:00

kerberos.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

key_escrow_schema.ldif

Re-number some attributes to compress our usage to be contiguous

2010-05-27 10:50:49 -04:00

krb5.conf.template

Make krb5kdc use the ldapi socket to talk to dirsrv

2011-01-20 15:49:30 -05:00

krb5.ini.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krb.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

krbrealm.con.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

ldapi.ldif

Enable ldapi connections in the management framework.

2009-08-27 13:36:58 -04:00

Makefile.am

Allow SASL/EXTERNAL authentication for the root user

2011-01-20 15:49:30 -05:00

master-entry.ldif

Use nsContainer and not extensibleObject for masters entries

2010-12-15 10:58:03 -05:00

memberof-conf.ldif

Display user and host membership in netgroups.

2010-11-24 08:38:41 -05:00

memberof-task.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

modrdn-krbprinc.ldif

ipa-modrdn: Enable plugin to handle krbPrincipalName on renames

2010-10-28 07:58:31 -04:00

nis.uldif

add support for hostCategory and userCategory

2010-11-04 14:43:03 -04:00

preferences.html.template

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

referint-conf.ldif

Mass tree reorganization for IPAv2. To view previous history of files use:

2009-02-03 15:27:14 -05:00

replica-acis.ldif

Allow using Kerberos credentials with the 'connect' command

2011-01-14 14:06:56 -05:00

root-autobind.ldif

Allow SASL/EXTERNAL authentication for the root user

2011-01-20 15:49:30 -05:00

schema_compat.uldif

Move sudo related data all under cn=sudo

2011-01-17 11:46:45 -05:00

unique-attributes.ldif

Set ipaUniqueId to be unwritable and add to uniqueness configuration.

2010-09-20 15:59:53 -04:00

user_private_groups.ldif

Move mep templates under cn=etc

2011-01-14 14:06:56 -05:00

uuid-ipauniqueid.ldif

UUIDs: remove uuid python plugin and let DS always autogenerate

2010-10-28 07:58:31 -04:00

wsgi.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00