YouTrack Support | JetBrains

Kevin Thorpe

Follow New posts New posts and comments

Total activity 6
Last activity January 12, 2016 02:26
Member since November 03, 2014 18:16
Following 0 users
Followed by 0 users
Votes 0
Subscriptions 2

Kevin Thorpe created a post, March 11, 2015 11:53
How do I restrict LDAP logins to only a subset of our LDAP accounts?

We're on YouTrack 6 and using the LDAP authentication module. In our case our LDAP server has all our customer users in it as well as our staff. For obvious reasons we only want our staff to be abl...
1. Community
2. YouTrack - General Discussions (JetForum)
- 1 follower
- 0 comments
- 0 votes
Kevin Thorpe commented, November 04, 2014 16:06
Yep, ZIP file can be hardened. Create a youtrack user and unzip youtrack in that home directory with all files owned by root. Fire up once as root and set the log, tmp and data paths. Check it all ...
- 0 votes
Kevin Thorpe commented, November 03, 2014 18:43
Ah, I see the ZIP version is more amenable to hardening. It would be nice though to have a way of running the jar version with the unpacking step being manual. That way we can lock the code files d...
- 0 votes
Kevin Thorpe commented, November 03, 2014 18:16
This is extremely worrying. Running from a jar file like this means that the code (war and jar files) are writeable by the server process. Our security requirements mean that we cannot run code in ...
- 0 votes