Peter Palfrader [Thu, 18 Jul 2013 20:12:01 +0000 (22:12 +0200)]
And also for guests
Peter Palfrader [Thu, 18 Jul 2013 20:10:33 +0000 (22:10 +0200)]
We use schroot now
Peter Palfrader [Thu, 18 Jul 2013 20:10:28 +0000 (22:10 +0200)]
Fix a typo
Peter Palfrader [Thu, 20 Jun 2013 11:57:16 +0000 (13:57 +0200)]
Fix ipv6 check
Peter Palfrader [Fri, 7 Jun 2013 17:07:58 +0000 (19:07 +0200)]
use valid MX syntax
Peter Palfrader [Fri, 7 Jun 2013 17:02:14 +0000 (19:02 +0200)]
Allow incoming-mx remapping in ud-generate
Peter Palfrader [Sat, 1 Jun 2013 09:49:14 +0000 (11:49 +0200)]
ud-generate: Support writing gitolite config for just one user-group
Peter Palfrader [Sat, 1 Jun 2013 09:40:30 +0000 (11:40 +0200)]
Fix typo in help output
Peter Palfrader [Sat, 1 Jun 2013 09:40:24 +0000 (11:40 +0200)]
Minor variable rename
Peter Palfrader [Sat, 1 Jun 2013 09:40:11 +0000 (11:40 +0200)]
Minor refactoring of IsInGroup so it can take arrays and dicts
Peter Palfrader [Mon, 8 Apr 2013 12:02:10 +0000 (14:02 +0200)]
ud-generate: Allow more than one email address in userForward. Quite useful for role accounts
Martin Zobel-Helas [Fri, 8 Mar 2013 23:30:07 +0000 (00:30 +0100)]
disable dnsZoneEntry and privateSub for guest accounts
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Tue, 19 Feb 2013 19:58:59 +0000 (20:58 +0100)]
fix generation of voip-passwords file
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Sat, 18 Aug 2012 16:24:57 +0000 (18:24 +0200)]
fix permissions
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Sat, 18 Aug 2012 16:15:29 +0000 (18:15 +0200)]
allow listmasters to write to the privateSub attribute
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Tollef Fog Heen [Sat, 28 Jul 2012 08:03:49 +0000 (10:03 +0200)]
s/looses/loses/
Martin Zobel-Helas [Wed, 13 Jun 2012 22:10:50 +0000 (00:10 +0200)]
Merge branch 'master' of git+ssh://db.debian.org/git/userdir-ldap
* 'master' of git+ssh://db.debian.org/git/userdir-ldap:
fix
userdir-ldap-slapd.conf.in: explicitly list readable attributes. End with 'by * none'.
ud-generate: Also rebuild if one of our keyrings has changed, even if ldap has not.
ud-lock: support supplying a status to set instead of 'retiring'
Martin Zobel-Helas [Wed, 13 Jun 2012 22:10:32 +0000 (00:10 +0200)]
add voipPassword
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 14 May 2012 16:50:46 +0000 (18:50 +0200)]
fix
Peter Palfrader [Mon, 14 May 2012 16:45:39 +0000 (18:45 +0200)]
userdir-ldap-slapd.conf.in: explicitly list readable attributes. End with 'by * none'.
Peter Palfrader [Wed, 11 Apr 2012 08:55:50 +0000 (10:55 +0200)]
ud-generate: Also rebuild if one of our keyrings has changed, even if ldap has not.
Peter Palfrader [Thu, 29 Mar 2012 21:45:28 +0000 (23:45 +0200)]
ud-lock: support supplying a status to set instead of 'retiring'
Martin Zobel-Helas [Fri, 23 Mar 2012 18:19:56 +0000 (19:19 +0100)]
Merge branch 'master' of git+ssh://db.debian.org/git/userdir-ldap
* 'master' of git+ssh://db.debian.org/git/userdir-ldap:
change mailPreserveSuffixSeparator to a string Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 23 Mar 2012 18:16:06 +0000 (19:16 +0100)]
change mailPreserveSuffixSeparator to a string
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 23 Mar 2012 18:16:06 +0000 (19:16 +0100)]
change mailPreserveSuffixSeparator to a string
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Fri, 23 Mar 2012 12:59:51 +0000 (13:59 +0100)]
Merge branch 'master' of git+ssh://db.debian.org/git/userdir-ldap
* 'master' of git+ssh://db.debian.org/git/userdir-ldap: (21 commits)
ud-generate: lock replicators
Set generate_dir in the non-override case
Get lock sooner, connect to ldap later
flocks do not need freeing
Profile if UD_PROFILE is in environment
No need to depend on python-lockfile anymore
Use flock()
Use eatmydata!
UDLdap.py: make a cache for __getitem__() decisions.
No need to mkdir userkeys directory anymore
get rid of global state variable CurrentHost. This will enable upcoming changes.
GenerateDir is no longer a global var
minor nit
speed up ssh tarball generation
ud-generate speed, I
ud-generate: Move main code into a ud_generate()
ud-generate: Add -f option to build even if cache is current
ud-generate: Move code into getLastBuildTime() and getLastLDAPChangeTime() functions.
ud-generate: No longer expand $ in dnsZoneEntry data to a \n\t.
changelog entry for ud-mailgate fix
...
Martin Zobel-Helas [Fri, 23 Mar 2012 12:59:13 +0000 (13:59 +0100)]
add mailPreserveSuffixSeparator to LDAP schema
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 12 Mar 2012 15:57:54 +0000 (16:57 +0100)]
ud-generate: lock replicators
ud-generate: The ssh authorized_keys file for the sshdist user now wraps
the rsync call in an flock wrapper that acquires a shared lock on
ud-generate's lock. This prevents syncing while ud-generate runs.
Peter Palfrader [Mon, 12 Mar 2012 15:46:20 +0000 (16:46 +0100)]
Set generate_dir in the non-override case
Peter Palfrader [Mon, 12 Mar 2012 15:29:50 +0000 (16:29 +0100)]
Get lock sooner, connect to ldap later
Peter Palfrader [Mon, 12 Mar 2012 15:29:16 +0000 (16:29 +0100)]
flocks do not need freeing
Peter Palfrader [Mon, 12 Mar 2012 15:28:29 +0000 (16:28 +0100)]
Profile if UD_PROFILE is in environment
Peter Palfrader [Mon, 12 Mar 2012 15:17:53 +0000 (16:17 +0100)]
No need to depend on python-lockfile anymore
Peter Palfrader [Mon, 12 Mar 2012 15:16:28 +0000 (16:16 +0100)]
Use flock()
Peter Palfrader [Mon, 12 Mar 2012 14:52:04 +0000 (15:52 +0100)]
Use eatmydata!
Peter Palfrader [Mon, 12 Mar 2012 14:47:43 +0000 (15:47 +0100)]
UDLdap.py: make a cache for __getitem__() decisions.
Peter Palfrader [Mon, 12 Mar 2012 14:17:20 +0000 (15:17 +0100)]
No need to mkdir userkeys directory anymore
Peter Palfrader [Mon, 12 Mar 2012 14:16:16 +0000 (15:16 +0100)]
get rid of global state variable CurrentHost. This will enable upcoming changes.
Peter Palfrader [Mon, 12 Mar 2012 13:57:53 +0000 (14:57 +0100)]
GenerateDir is no longer a global var
Peter Palfrader [Mon, 12 Mar 2012 13:00:41 +0000 (14:00 +0100)]
minor nit
Peter Palfrader [Mon, 12 Mar 2012 12:56:10 +0000 (13:56 +0100)]
speed up ssh tarball generation
No longer write indidividual user's ssh authorized_keys to disk, only to
read them later. Directly create a TarInfo object without referring to
any on-disk files.
Peter Palfrader [Mon, 12 Mar 2012 11:53:56 +0000 (12:53 +0100)]
ud-generate speed, I
cut down on calls to IsInGroup by doing it once in generate_host() and
not having the individual generators run it.
side effect: Up until now we exported empty groups to a host, if that group had
a user with that group as their primary group - even if that particular user
was not exported to this this. No we no longer export empty groups.
Peter Palfrader [Mon, 12 Mar 2012 11:06:49 +0000 (12:06 +0100)]
ud-generate: Move main code into a ud_generate()
Peter Palfrader [Mon, 12 Mar 2012 10:56:18 +0000 (11:56 +0100)]
ud-generate: Add -f option to build even if cache is current
Peter Palfrader [Mon, 12 Mar 2012 10:46:12 +0000 (11:46 +0100)]
ud-generate: Move code into getLastBuildTime() and getLastLDAPChangeTime() functions.
Peter Palfrader [Mon, 12 Mar 2012 10:37:48 +0000 (11:37 +0100)]
ud-generate: No longer expand $ in dnsZoneEntry data to a \n\t.
Peter Palfrader [Sat, 10 Mar 2012 18:05:08 +0000 (19:05 +0100)]
changelog entry for ud-mailgate fix
Peter Palfrader [Sat, 10 Mar 2012 18:04:15 +0000 (19:04 +0100)]
Do not try to do an ldap modify with no changes - now show command to changes@ should work again
Martin Zobel-Helas [Sat, 10 Mar 2012 16:44:43 +0000 (17:44 +0100)]
fix dependency, needed by ud-generate
Peter Palfrader [Sat, 10 Mar 2012 14:44:59 +0000 (15:44 +0100)]
Make cache_last_mod thing more robust
Peter Palfrader [Sat, 10 Mar 2012 14:33:13 +0000 (15:33 +0100)]
make ud-generate work when there is no previous run that created last_update.trace
Peter Palfrader [Sat, 10 Mar 2012 14:21:29 +0000 (15:21 +0100)]
debianGroups may have cn attribute
Peter Palfrader [Sat, 10 Mar 2012 13:50:22 +0000 (14:50 +0100)]
Merge from torproject.org:
- Allow sshRSAAuthKey for role accounts.
- Support ssh key attributes for gitolite export.
- Add ssh-gitolite support.
Peter Palfrader [Sat, 10 Mar 2012 13:44:43 +0000 (14:44 +0100)]
One less hardcode debian.org domain in slapd.conf snippet
Stephen Gran [Sat, 10 Mar 2012 08:06:35 +0000 (08:06 +0000)]
changelog entry
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 10 Mar 2012 08:05:18 +0000 (08:05 +0000)]
purge old logs
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 9 Mar 2012 20:19:55 +0000 (20:19 +0000)]
and ship new file to hosts
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 9 Mar 2012 20:17:26 +0000 (20:17 +0000)]
Write both time of last ldap update and time of last run to trace file
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Fri, 9 Mar 2012 20:13:46 +0000 (20:13 +0000)]
record both time of last action and last run
Signed-off-by: Stephen Gran <steve@lobefin.net>
Martin Zobel-Helas [Fri, 9 Mar 2012 09:33:57 +0000 (10:33 +0100)]
ud-replicate: set correct permissions for web-passwords
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Martin Zobel-Helas [Thu, 8 Mar 2012 22:31:36 +0000 (23:31 +0100)]
export webPassword
Signed-off-by: Martin Zobel-Helas <zobel@debian.org>
Peter Palfrader [Mon, 5 Mar 2012 10:56:00 +0000 (11:56 +0100)]
mess with uid number generation
* Allow a set of users to be ignored for picking UIDs.
* When picking uid/gid numbers try to pick the same number for both.
Peter Palfrader [Mon, 5 Mar 2012 10:28:03 +0000 (11:28 +0100)]
Introduce BaseBaseDN which is the real base dn
Peter Palfrader [Mon, 5 Mar 2012 10:17:58 +0000 (11:17 +0100)]
userdir_ldap.py: read auth password from environment if set
Peter Palfrader [Wed, 29 Feb 2012 16:24:35 +0000 (17:24 +0100)]
Sync welcome-message-800
Martin Zobel-Helas [Sun, 19 Feb 2012 13:48:03 +0000 (14:48 +0100)]
add webPassword
Martin Zobel-Helas [Sun, 19 Feb 2012 13:46:24 +0000 (14:46 +0100)]
add webPassword
Stephen Gran [Thu, 29 Dec 2011 21:23:11 +0000 (21:23 +0000)]
Merge branch 'master' of ssh://db.debian.org/git/userdir-ldap
Stephen Gran [Thu, 29 Dec 2011 21:22:45 +0000 (21:22 +0000)]
Fix some usages of hardcoded debian.org
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 29 Dec 2011 21:21:00 +0000 (21:21 +0000)]
Update to match live slapd.conf
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Thu, 29 Dec 2011 21:06:23 +0000 (22:06 +0100)]
ud-replicate: now preserve server side modifcation times when rsyncing data
Peter Palfrader [Thu, 29 Dec 2011 20:55:21 +0000 (21:55 +0100)]
fix breaking old ud-generate locks.
Peter Palfrader [Wed, 2 Nov 2011 22:42:06 +0000 (23:42 +0100)]
ud-replicate: do not hard-code 'debian.org' in the 'write-zonefile debian.org' call, but instead re-use the domain from email-append.
Stephen Gran [Fri, 26 Aug 2011 19:26:15 +0000 (19:26 +0000)]
why does python not believe in variable scoping, but then complain about it?
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 20 Aug 2011 16:19:24 +0000 (17:19 +0100)]
mmmm, that's likely to be a namespace clash
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Sat, 20 Aug 2011 15:55:59 +0000 (15:55 +0000)]
We need to use an actually defined variable name
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Mon, 15 Aug 2011 19:52:42 +0000 (21:52 +0200)]
ud-mailgate: only run ldapmodfiy if we actually have attributes to modify.
Faidon Liambotis [Sun, 14 Aug 2011 13:23:01 +0000 (16:23 +0300)]
Add slapo-constaint for keyfingerprint
Stephen Gran [Fri, 29 Jul 2011 16:24:52 +0000 (16:24 +0000)]
Make ud-generate pull the last modification time out of ldap and only
run if ldap has been updated. We have some more architecture work to do
before this can go live without making the monitoring go insane.
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 9 Jun 2011 19:28:29 +0000 (19:28 +0000)]
and changelog too
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 9 Jun 2011 19:28:07 +0000 (19:28 +0000)]
update Net::LDAP import
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 9 Jun 2011 17:52:36 +0000 (17:52 +0000)]
and some changelog
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 9 Jun 2011 17:47:12 +0000 (17:47 +0000)]
more sha module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Stephen Gran [Thu, 9 Jun 2011 17:17:46 +0000 (17:17 +0000)]
get rid of most uses of sha module
Signed-off-by: Stephen Gran <steve@lobefin.net>
Peter Palfrader [Sat, 21 May 2011 14:50:21 +0000 (16:50 +0200)]
Handle capital {CRYPT} in userpasswd
Peter Palfrader [Sat, 21 May 2011 14:42:41 +0000 (16:42 +0200)]
Filter on shadowAccount
Peter Palfrader [Sat, 21 May 2011 14:42:02 +0000 (16:42 +0200)]
no userpassword means locked.
Peter Palfrader [Sat, 21 May 2011 14:03:21 +0000 (16:03 +0200)]
naming your variable like a module is unsmart
Peter Palfrader [Sat, 21 May 2011 13:41:47 +0000 (15:41 +0200)]
More lax with mime
Peter Palfrader [Sat, 21 May 2011 13:13:31 +0000 (15:13 +0200)]
ud-echelon fixes
Peter Palfrader [Sat, 21 May 2011 12:57:18 +0000 (14:57 +0200)]
unreleased
Peter Palfrader [Sat, 21 May 2011 12:53:28 +0000 (14:53 +0200)]
release
Peter Palfrader [Sat, 21 May 2011 12:52:28 +0000 (14:52 +0200)]
try to properly handle some more mime stuff.
- use email module instead of deprecated mimetools and multifile modules
- changes: sigcheck ud-echelon ud-mailgate userdir_gpg.py
- move ud-echelon and sigcheck to GPGCheckSig2 interface.
Peter Palfrader [Sat, 21 May 2011 12:50:28 +0000 (14:50 +0200)]
Update debian/changelog
Peter Palfrader [Sat, 21 May 2011 10:52:49 +0000 (12:52 +0200)]
Move gpgwrapper aside
Peter Palfrader [Sat, 21 May 2011 10:49:24 +0000 (12:49 +0200)]
Dead import
Peter Palfrader [Sat, 21 May 2011 10:40:20 +0000 (12:40 +0200)]
Get rid of tabs
Peter Palfrader [Fri, 25 Mar 2011 19:03:41 +0000 (20:03 +0100)]
Update changelog
Peter Palfrader [Fri, 25 Mar 2011 19:03:05 +0000 (20:03 +0100)]
Handle sync keyring *dirs*
Peter Palfrader [Fri, 25 Mar 2011 18:58:45 +0000 (19:58 +0100)]
Lock ud-generate process