Fixed slapd.conf modulepath

ldap/manifests/init.pp

@@ -353,6 +353,7 @@ class ldap::server {
             $package_name = "slapd"
             $service_name = "slapd"
             $config = "/etc/ldap"
+            $modulepath = "/usr/lib/openldap"
         }
         "fedora": {
             $user = "ldap"
@@ -360,6 +361,10 @@ class ldap::server {
             $package_name = "openldap-servers"
             $service_name = "slapd"
             $config = "/etc/openldap"
+            $modulepath = $architecture ? {
+                "x86_64" => "/usr/lib64/openldap",
+                default  => "/usr/lib/openldap",
+            }
         }
         "centos": {
             $user = "ldap"
@@ -373,6 +378,10 @@ class ldap::server {
                 /^6/ => "slapd",
             }
             $config = "/etc/openldap"
+            $modulepath = $architecture ? {
+                "x86_64" => "/usr/lib64/openldap",
+                default  => "/usr/lib/openldap",
+            }
         }
         "openbsd": {
             $user = "_openldap"
@@ -380,6 +389,7 @@ class ldap::server {
             $package_name = "openldap-server"
             $service_name = "slapd"
             $config = "/etc/openldap"
+            $modulepath = ""
         }
     }
 
@@ -423,7 +433,7 @@ class ldap::server {
     file { "${config}/slapd.conf.d":
         ensure  => directory,
         source  => "puppet:///modules/custom/empty",
-        mode    => "0750",
+        mode    => "0640",
         owner   => "root",
         group   => $group,
         purge   => true,
@@ -498,7 +508,7 @@ class ldap::server {
     file { "${config}/schema":
         ensure  => directory,
         source  => "puppet:///modules/custom/empty",
-        mode    => "0755",
+        mode    => "0644",
         owner   => "root",
         group   => $operatingsystem ? {
             "openbsd" => "wheel",

ldap/templates/slapd.conf.erb

@@ -23,7 +23,8 @@ pidfile		/var/run/openldap/slapd.pid
 argsfile	/var/run/openldap/slapd.args
 
 # overlay modules to load
-modulepath /usr/lib/openldap
+<% if scope.lookupvar('ldap::server::modulepath') != '' -%>
+modulepath <%= modulepath %>
 moduleload ppolicy.la
 moduleload syncprov.la
 <%   if has_variable?('ldap_server_modules') -%>
@@ -31,6 +32,7 @@ moduleload syncprov.la
 moduleload <%= name %>.la
 <%     end -%>
 <%   end -%>
+<% end -%>
 
 # certificates
 TLSCertificateFile	<%= scope.lookupvar('ssl::certs') %>/slapd.crt