Fixed ldap::auth for Fedora 17.

This commit is contained in:
Timo Mkinen 2012-07-04 11:43:47 +03:00
parent 419021fb2e
commit 5639ffcf65

View file

@ -96,7 +96,7 @@ class ldap::auth inherits ldap::client {
package { [ "sssd", "pam_ldap", ]:
ensure => installed,
}
exec { "authconfig --enableldap --enableldapauth --ldapserver='${ldap_uri}' --ldapbasedn='${ldap_basedn}' --enablesssd --update":
exec { "authconfig --enableldap --enableldapauth --ldapserver='${ldap_uri}' --ldapbasedn='${ldap_basedn}' --enablesssd --krb5realm='' --update":
path => "/bin:/usr/bin:/sbin:/usr/sbin",
unless => 'cat /etc/sysconfig/authconfig | egrep "^USELDAPAUTH=yes$|^USELDAP=yes$" | wc -l | egrep "^2$"',
before => Augeas["sssd-conf"],
@ -106,6 +106,8 @@ class ldap::auth inherits ldap::client {
changes => [
"set target[1]/ldap_tls_reqcert never",
"set target[1]/enumerate true",
"set target[1]/ldap_schema rfc2307bis",
"set target[1]/ldap_group_member uniqueMember",
],
incl => "/etc/sssd/sssd.conf",
lens => "MySQL.lns",