Petr Viktorin 193ced0bd7 Remove the global anonymous read ACI ...

Also remove
- the deny ACIs that implemented exceptions to it:
  - no anonymous access to roles
  - no anonymous access to member information
  - no anonymous access to hbac
  - no anonymous access to sudo (2×)
- its updater plugin

Part of the work for: https://fedorahosted.org/freeipa/ticket/3566

Reviewed-By: Martin Kosek <mkosek@redhat.com>

2014-05-26 12:14:55 +02:00

..

__init__.py

Add plugin framework to LDAP updates.

2011-11-22 23:57:10 -05:00

adtrust.py

Convert remaining update code to LDAPEntry API.

2014-01-24 20:29:31 +01:00

baseupdate.py

Remove unused imports from ipaserver/install

2013-03-01 16:59:44 +01:00

ca_renewal_master.py

Fix update_ca_renewal_master plugin on CA-less installs.

2014-04-10 16:40:10 +02:00

dns.py

Convert remaining update code to LDAPEntry API.

2014-01-24 20:29:31 +01:00

fix_replica_agreements.py

Convert remaining update code to LDAPEntry API.

2014-01-24 20:29:31 +01:00

Makefile.am

Store information about which CA server is master for renewals in LDAP.

2014-03-25 16:54:55 +01:00

rename_managed.py

Convert remaining update code to LDAPEntry API.

2014-01-24 20:29:31 +01:00

update_idranges.py

Convert remaining update code to LDAPEntry API.

2014-01-24 20:29:31 +01:00

update_managed_permissions.py

Remove the global anonymous read ACI

2014-05-26 12:14:55 +02:00

update_pacs.py

Add nfs:NONE to default PAC types only when needed

2013-04-15 14:46:21 +02:00

update_services.py

Convert remaining update code to LDAPEntry API.

2014-01-24 20:29:31 +01:00

updateclient.py

Remove some unused imports

2013-03-01 16:59:42 +01:00

upload_cacrt.py

Convert remaining update code to LDAPEntry API.

2014-01-24 20:29:31 +01:00