Adding new authorisations for reload on ip_ssh_eth0
This commit is contained in:
parent
0ff7961616
commit
d33fa9c421
|
@ -0,0 +1,16 @@
|
||||||
|
# -*- coding: utf-8 -*-
|
||||||
|
|
||||||
|
def toCidr(ip,mask=False):
|
||||||
|
""" Convert to CIDR notation
|
||||||
|
ip can be like this : 192.168.5.100/255.255.255.0
|
||||||
|
or you can provide the ip and the mask
|
||||||
|
"""
|
||||||
|
from IPy import IP
|
||||||
|
try:
|
||||||
|
if mask:
|
||||||
|
data="{0}/{1}".format(ip,mask)
|
||||||
|
else:
|
||||||
|
data=ip
|
||||||
|
return str(IP(data))
|
||||||
|
except:
|
||||||
|
return data
|
|
@ -44,6 +44,9 @@ server {
|
||||||
|
|
||||||
location = /reload {
|
location = /reload {
|
||||||
allow 127.0.0.1;
|
allow 127.0.0.1;
|
||||||
|
%for ipaddr in %%ip_ssh_eth0
|
||||||
|
allow %%toCidr(%%ipaddr, %%ipaddr.netmask_ssh_eth0)
|
||||||
|
%end for
|
||||||
deny all;
|
deny all;
|
||||||
include /etc/nginx/fastcgi_params;
|
include /etc/nginx/fastcgi_params;
|
||||||
fastcgi_pass unix:/var/run/llng-fastcgi-server/llng-fastcgi.sock;
|
fastcgi_pass unix:/var/run/llng-fastcgi-server/llng-fastcgi.sock;
|
||||||
|
|
|
@ -170,7 +170,7 @@
|
||||||
"portalDisplayAppslist": 1,
|
"portalDisplayAppslist": 1,
|
||||||
"confirmFormMethod": "post",
|
"confirmFormMethod": "post",
|
||||||
"domain": "%%nom_domaine_local",
|
"domain": "%%nom_domaine_local",
|
||||||
"cfgNum": "9",
|
"cfgNum": "1",
|
||||||
"authentication": "LDAP",
|
"authentication": "LDAP",
|
||||||
"samlNameIDFormatMapWindows": "uid",
|
"samlNameIDFormatMapWindows": "uid",
|
||||||
"authChoiceModules": {},
|
"authChoiceModules": {},
|
||||||
|
@ -354,7 +354,7 @@
|
||||||
"mailUrl": "https://%%authWebName/mail.pl",
|
"mailUrl": "https://%%authWebName/mail.pl",
|
||||||
"maintenance": 0,
|
"maintenance": 0,
|
||||||
"jsRedirect": 0,
|
"jsRedirect": 0,
|
||||||
"cfgAuthor": "dwho",
|
"cfgAuthor": "Cadoles",
|
||||||
"persistentStorageOptions": {
|
"persistentStorageOptions": {
|
||||||
"LockDirectory": "/var/lib/lemonldap-ng/psessions/lock",
|
"LockDirectory": "/var/lib/lemonldap-ng/psessions/lock",
|
||||||
"Directory": "/var/lib/lemonldap-ng/psessions"
|
"Directory": "/var/lib/lemonldap-ng/psessions"
|
||||||
|
|
Loading…
Reference in New Issue