Remove CA certificate database creation code for now.

This commit is contained in:
Ossi Herrala 2013-02-05 13:52:52 +00:00
parent 6ab334fa62
commit 11d7479ca8

View file

@ -436,22 +436,6 @@ class ldap::server {
notify => Exec["slaptest"], notify => Exec["slaptest"],
} }
file { "/etc/openldap/cacerts":
ensure => directory,
mode => "0755",
owner => "root",
group => "root",
require => Package["openldap-server"],
}
exec { "populate-etc-openldap-cacerts":
path => "/bin:/usr/bin:/sbin:/usr/sbin",
command => "csplit /etc/openldap/ca-certificates.crt '/BEGIN/' '{*}' ; sh -c 'for i in x* ; do name=`openssl x509 -hash -noout -in \$i`.0 ; openssl x509 -hash -in \$i -out \$name ; done' && rm -f x* .0",
cwd => "/etc/openldap/cacerts",
onlyif => "find /etc/openldap/cacerts ! -newer /etc/openldap/ca-certificates.crt | egrep '.*' || [ -z \"`ls /etc/openldap/cacerts`\" ]",
require => File["/etc/openldap/cacerts"],
before => Exec["slaptest"],
}
file { "slapd.conf": file { "slapd.conf":
ensure => present, ensure => present,
path => "${config}/slapd.conf", path => "${config}/slapd.conf",