Commit Graph

100 Commits

Author SHA1 Message Date
Rick Elrod
4a60ddc875 Nuke pkgdb some more... and probably break everything.
Signed-off-by: Rick Elrod <relrod@redhat.com>
2018-07-19 20:40:14 +00:00
Patrick Uiterwijk
da1d16de1b Reserve the username 'anonymous'. Almost disappointed nobody took it yet
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-28 12:48:23 +02:00
Patrick Uiterwijk
ea755f5a7c Rather than deploying a script, just run echo from the command line
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-18 16:48:50 +02:00
Patrick Uiterwijk
62190d66af Add FAS 'sar' script and deploy
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-05-18 10:30:08 +02:00
Nick Bebout
62ffac5b61 Add bexelbie to username blacklist 2018-03-06 16:54:41 +00:00
Patrick Uiterwijk
e4baec55e4 Blacklist username 'pagure'
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-02-08 00:34:02 +01:00
Patrick Uiterwijk
b9b720043b Mark the username 'git' as blacklisted
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-02-07 20:12:22 +01:00
Kevin Fenzi
f57b9808a4 switch to a grokmirror unpriv user for mirroring 2017-10-16 19:56:35 +00:00
Patrick Uiterwijk
936e8b261a yum accepted pkg=, package calls it name=
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-10-09 00:38:26 +02:00
Patrick Uiterwijk
039b08354a Yum allowed state=installed. Lets use state=present consistently
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 22:31:03 +00:00
Patrick Uiterwijk
adcbf72f03 Packageize this, packageize that, packageize the world
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 22:25:52 +00:00
Patrick Uiterwijk
b21fe5ce7c Temporary workaround: use internal hostname
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-08-10 10:44:17 +00:00
Patrick Uiterwijk
d71f544247 Sign with sha256
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-16 19:37:01 +02:00
Ralph Bean
9a8ab4f357 Add "freshmaker" to the FAS username blacklist. 2017-05-15 13:15:20 +00:00
Aidan Kahrs
e09d02cc5f Add alias to give me email matching irc nick and blacklist it as FAS user per nb 2017-05-02 18:08:38 +00:00
Kevin Fenzi
0acfaa2a7e Fix handlers, roles, and tasks to be handlers_path, roles_path and tasks_path so as not to conflict with ansible variables.
Fix duplicate definition of become default that was in group_vars/all as well as vars/global.
2017-04-13 15:46:14 +00:00
Patrick Uiterwijk
b29f5a76be Allow ECDSA and ED25519 SSH keys for non-infra
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-04-12 18:24:40 +00:00
Patrick Uiterwijk
8c61c34b32 Rekey FAS Captcha
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-03-03 19:19:34 +00:00
Nick Bebout
dc50ea60be Add jwf to fas blacklist in prod also 2017-02-27 15:15:20 +00:00
Nick Bebout
3384117c24 Add jwf -> jflory7 alias, add jwf to FAS username blacklist 2017-02-27 14:48:00 +00:00
Patrick Uiterwijk
376b5d1098 Use id.fp.o
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 08:27:58 +00:00
Patrick Uiterwijk
7b223b6ea4 Ipa01
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-13 19:14:18 +00:00
Patrick Uiterwijk
d03729de0d Fix ipa config in stg
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-13 19:08:54 +00:00
Patrick Uiterwijk
d2f89d192a Use proxy for fas sync
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-04 03:06:31 +00:00
Ralph Bean
6d59db947b Blacklist the m8y user in FAS. 2016-10-21 14:30:20 +00:00
Patrick Uiterwijk
9164552f6f Put krb5.conf in base role
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-10-13 17:57:17 +00:00
Patrick Uiterwijk
674c930093 Enable FAS -> IPA sync in production
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-10-13 15:46:47 +00:00
Patrick Uiterwijk
7b19073b0d Deploy FAS config for prod IPA
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-10-13 15:40:52 +00:00
Patrick Uiterwijk
b261403d84 FAS config fixes
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-20 22:02:49 +00:00
Patrick Uiterwijk
f90d1ce665 Reserve the username 'bodhi'
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-08 20:18:47 +00:00
Patrick Uiterwijk
8e44c762e1 Fix whitespace issues in fas
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-10 15:10:26 +00:00
Patrick Uiterwijk
8e9c12aa1f Reserve fas_sync and add valid_ssh_key
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-09 23:57:07 +00:00
Patrick Uiterwijk
80bbb9f0d2 Small config update to include quotes
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-09 23:54:39 +00:00
Patrick Uiterwijk
1ee63dd4a6 This is a template
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-09 23:36:12 +00:00
Patrick Uiterwijk
e62219df36 Add IPA sync stuff to staging fas
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-09 23:32:37 +00:00
Patrick Uiterwijk
845f9b7926 Remove email validation hotfix now thats in upstream
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-09 10:32:00 +00:00
Kevin Fenzi
04a52b8667 Death to all trailing whitespace. 2016-08-08 19:36:31 +00:00
Kevin Fenzi
9369b24a0a enable nonblockedemail validator 2016-07-13 17:15:10 +00:00
Patrick Uiterwijk
6b263dfd0e Uncomment the blocked email patch for now
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-12 22:06:27 +00:00
Patrick Uiterwijk
d6fce05c1a Add fas config for blocked email domains
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-12 21:33:20 +00:00
Patrick Uiterwijk
656f72948c Backport FAS patch 168
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-12 21:32:19 +00:00
Patrick Uiterwijk
29fa82db8c Fix indntation
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-12 20:38:12 +00:00
Patrick Uiterwijk
df3205a62a Backport Fas PR #177
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-12 20:33:03 +00:00
Pierre-Yves Chibon
0755239efd Hotfix FAS2
This hotfix brings a few features
- Limit the user returned to a specified status (allowing to retrieve only the
active accounts)
- Search user by their email address
- Search user by their IRC nick
- Does not perform a LIKE query if there is no '%' in the pattern searched
2016-06-13 10:30:05 +02:00
Kevin Fenzi
491f9a7e85 Push this patch live. Got +1's in irc for FB 2016-06-09 19:10:08 +00:00
Kevin Fenzi
43abff4816 patch from https://github.com/fedora-infra/fas/pull/163 2016-06-09 16:10:08 +00:00
Kevin Fenzi
94411b528f initial version of fas server email validator hotfix for stg 2016-06-09 16:08:42 +00:00
Dennis Gilmore
3a3bac3ab7 blacklist containerbuild from being created in fas
Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
2016-03-24 21:17:57 +00:00
Patrick Uiterwijk
0662de958d This is needed by Basset to be able to enable accounts
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-03-18 21:38:23 +00:00
Patrick Uiterwijk
3792c64a5a Enable Basset in production
This enables the FAS production hooks for Basset.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-03-18 19:48:27 +00:00