tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ldap: Added GSSAPI authentication support for CentOS 6 nslcd.

Browse source
This commit is contained in:
Timo Makinen 2014-01-23 10:28:26 +02:00
parent 0f41b36d1f
commit 9a07075a8c
2 changed files with 128 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

23
ldap/manifests/init.pp
View file

@ -105,9 +105,6 @@ class ldap::auth(
group => "root",
notify => Service["nslcd"],
}
if $auth == "gssapi" {
fail("gssapi not supported on ${::operatingsystem}")
}
augeas { "pam-ldap-conf":
changes => [ "set ssl ${ssl}",
"set pam_password exop",
@ -115,6 +112,26 @@ class ldap::auth(
incl => "/etc/pam_ldap.conf",
lens => "Spacevars.simple_lns",
}
if $auth == "gssapi" and $::operatingsystem != "Fedora" {
file { "/etc/init.d/nslcd":
ensure => present,
source => "puppet:///modules/ldap/nslcd.init.gssapi",
mode => "0755",
owner => "root",
group => "root",
require => Package["nss-pam-ldapd"],
notify => Service["nslcd"],
}
file { "/etc/sysconfig/nslcd":
ensure => present,
content => "K5START_PRINCIPAL='${principal}'\n",
mode => "0755",
owner => "root",
group => "root",
require => Package["nss-pam-ldapd"],
notify => Service["nslcd"],
}
}
service { "nslcd":
ensure => running,
enable => true,