eb34303c7b
ldap: set fields the user can change on their own
2023-05-25 22:23:25 +01:00
d1b79da77c
ldap: only allow ssh key login on linux servers
2023-05-25 16:53:59 +01:00
e748eb306a
ldap: add an attribute for the created date
2023-05-25 12:12:30 +01:00
1cbe71db12
gitlab: limit to only active members
2023-05-24 22:01:01 +01:00
d1cf49bb83
gitlab: would like to use ee, but sadly too expensive
2023-05-24 21:37:16 +01:00
3dc27bcf77
gitlab: properly use the username
2023-05-24 21:08:42 +01:00
59f4057698
gitlab: basic setup
2023-05-24 20:57:49 +01:00
e0e1b83e12
gitlab: I think this is the right config
2023-05-24 16:56:59 +01:00
02fb3e28cd
fix: needed the right imports
2023-05-24 16:52:18 +01:00
3df29a42d4
fix: need the dns imported
2023-05-24 16:51:15 +01:00
95cdbf2b4e
feat: properly modularised games
2023-05-24 16:39:02 +01:00
920f6ab86e
feat: dns fully modularised now
2023-05-24 16:12:48 +01:00
34de735720
feat: turned ulfm into a proper module
2023-05-24 15:59:22 +01:00
91a3eb6a1a
ldap: use the home given in the ldap, will allow for custom homes
2023-05-24 15:54:00 +01:00
d63ebabc85
ldap: able to deal with up to ssha512 passwords
2023-05-24 15:31:58 +01:00
d056929a18
ldap: extended class
2023-05-24 00:35:17 +01:00
934b1ff1c4
ldap: using ladps seems to work
2023-05-23 23:47:57 +01:00
41449dd28c
ldap: fixced the encryption key required
2023-05-23 23:30:27 +01:00
44921afecd
acme: may as well be patient
2023-05-21 22:45:40 +01:00
de76e8eee6
ldap: now got secure mode
2023-05-21 22:45:20 +01:00
a660a60346
fix: group should be able to write to it as well
2023-05-21 21:51:17 +01:00
693043b081
dns: new functions work well
...
Will try to figure out if the two functions can be merged so its a single function called
2023-05-21 21:48:30 +01:00
f8f2f6fa15
dns: better function for the etc files (basically using a nice wrapper)
2023-05-21 21:30:14 +01:00
c6b766bd65
dns: function to handle opn domains
2023-05-21 21:25:21 +01:00
e47f2c85f2
dns: a function to give thw whitelist for the cache networks
2023-05-21 20:22:54 +01:00
126db6e3cb
dns: now have a proper primary and secondary
2023-05-21 19:38:13 +01:00
1e9b63e13d
dns: added more otehr domains, will tidy up config better later
2023-05-21 19:06:30 +01:00
d3e1e3e67f
dns: added csn.ul.ie
2023-05-21 16:18:53 +01:00
9618d87c67
dns: parametrised the config
2023-05-21 16:18:39 +01:00
c42b13b990
fix: ports are numbers not strings
2023-05-21 12:23:57 +01:00
81b41087fe
feat: added ldaps
2023-05-21 12:17:06 +01:00
ad2c9dad6b
fix: better handling of domain
2023-05-21 12:08:26 +01:00
6e58eac8c1
fix: properly use the port
2023-05-21 12:05:19 +01:00
b15b07ae36
fix: move base into teh config
2023-05-21 12:02:52 +01:00
48a23519e9
fix: got permissions "working" for teh password reset, not ideal though
2023-05-21 03:09:24 +01:00
60e33e2abb
ldap: give users a home dir
2023-05-21 01:39:01 +01:00
e73e15f524
ldap: client is properly working now
2023-05-21 01:38:19 +01:00
67a0d1b8bf
fix: had to give the file the right permissions
...
Also need to restart openlpad.service on password change
2023-05-21 00:19:20 +01:00
32577ecebc
fix: typo in name
2023-05-20 22:20:06 +01:00
4e664ce1bc
feat: ldap now has secrets properly stored
2023-05-20 21:33:04 +01:00
144f3bce54
ldap: got a tool to manage the password resets and ssh key
2023-05-20 19:33:08 +01:00
c17a28d7a9
ldap: now got skMemberOf to replace memberof (memberof does not work on unixgroups)
2023-05-20 15:26:03 +01:00
0c57b35778
ldap: is working as intended, working on scripting to add and manage users
2023-05-20 03:08:30 +01:00
f6183c1b10
podman: was working, now it isnt AGHHHHHHHHH
2023-05-19 19:15:22 +01:00
614d905dfd
docker: now using podman
...
had to reboot to make ti come into effect
2023-05-19 18:18:41 +01:00
7e380d6932
ldap: a mostly working ldaish setup
2023-05-18 21:59:23 +01:00
baa226cacf
ldap: cant have uppercase letters in username
2023-05-16 23:58:34 +01:00
53696c927e
ldap: first attempt at ldap
2023-05-16 22:23:04 +01:00
4ef6c14a32
feat: basic gitlab setup
2023-05-16 16:40:49 +01:00
5579de7e7c
dns: fixed issue that could cause a DOS attach (via DNS amplification)
...
ITD's router was setting teh IP of all external traffic as 193.1.99.65, which was part of the 193.1.99.64/26 subnet.
The fix is to explisitly list all our IP's
2023-05-05 14:40:27 +01:00
