Style fixes for kerberos module.
This commit is contained in:
parent
5fa2299997
commit
f6ed541068
1 changed files with 23 additions and 18 deletions
|
@ -18,26 +18,30 @@
|
||||||
#
|
#
|
||||||
class kerberos::client {
|
class kerberos::client {
|
||||||
|
|
||||||
case $operatingsystem {
|
case $::operatingsystem {
|
||||||
centos,fedora: {
|
"centos","fedora": {
|
||||||
package { "krb5-workstation":
|
package { "krb5-workstation":
|
||||||
ensure => installed,
|
ensure => installed,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
"openbsd": {}
|
||||||
|
default: {
|
||||||
|
fail("kerberos::client not supported in ${::operatingsystem}")
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
file { "krb5.conf":
|
file { "krb5.conf":
|
||||||
path => $operatingsystem ? {
|
|
||||||
openbsd => "/etc/kerberosV/krb5.conf",
|
|
||||||
default => "/etc/krb5.conf",
|
|
||||||
},
|
|
||||||
ensure => present,
|
ensure => present,
|
||||||
|
path => $::operatingsystem ? {
|
||||||
|
"openbsd" => "/etc/kerberosV/krb5.conf",
|
||||||
|
default => "/etc/krb5.conf",
|
||||||
|
},
|
||||||
content => template("kerberos/krb5.conf.erb"),
|
content => template("kerberos/krb5.conf.erb"),
|
||||||
mode => "0644",
|
mode => "0644",
|
||||||
owner => "root",
|
owner => "root",
|
||||||
group => $operatingsystem ? {
|
group => $::operatingsystem ? {
|
||||||
openbsd => "wheel",
|
"openbsd" => "wheel",
|
||||||
default => "root",
|
default => "root",
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -66,7 +70,7 @@ class kerberos::auth {
|
||||||
include kerberos::client
|
include kerberos::client
|
||||||
$kdclist = inline_template('<%= kerberos_kdc.join(" ") -%>')
|
$kdclist = inline_template('<%= kerberos_kdc.join(" ") -%>')
|
||||||
|
|
||||||
case $operatingsystem {
|
case $::operatingsystem {
|
||||||
"centos","fedora": {
|
"centos","fedora": {
|
||||||
package { "pam_krb5":
|
package { "pam_krb5":
|
||||||
ensure => installed,
|
ensure => installed,
|
||||||
|
@ -79,7 +83,7 @@ class kerberos::auth {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
default: {
|
default: {
|
||||||
fail("kerberos::auth not supported on ${operatingsystem}")
|
fail("kerberos::auth not supported on ${::operatingsystem}")
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -96,7 +100,9 @@ class kerberos::auth {
|
||||||
# Directory where to store Kerberos database files
|
# Directory where to store Kerberos database files
|
||||||
# defaults to /srv/kerberos
|
# defaults to /srv/kerberos
|
||||||
#
|
#
|
||||||
class kerberos::server inherits kerberos::client {
|
class kerberos::server {
|
||||||
|
|
||||||
|
require kerberos::client
|
||||||
|
|
||||||
package { "krb5-server":
|
package { "krb5-server":
|
||||||
ensure => installed,
|
ensure => installed,
|
||||||
|
@ -131,8 +137,7 @@ class kerberos::server inherits kerberos::client {
|
||||||
mode => "0600",
|
mode => "0600",
|
||||||
owner => "root",
|
owner => "root",
|
||||||
group => "root",
|
group => "root",
|
||||||
require => [ Package["krb5-server"],
|
require => [ Package["krb5-server"], File["/srv/kerberos"], ],
|
||||||
File["/srv/kerberos"], ],
|
|
||||||
notify => Service["krb5kdc"],
|
notify => Service["krb5kdc"],
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -214,9 +219,9 @@ define kerberos::keytab($principals = [], $ensure = present, $owner = "root", $g
|
||||||
|
|
||||||
case $group {
|
case $group {
|
||||||
"": {
|
"": {
|
||||||
case $operatingsystem {
|
case $::operatingsystem {
|
||||||
openbsd: { $real_group = "wheel" }
|
"openbsd": { $real_group = "wheel" }
|
||||||
default: { $real_group = "root" }
|
default: { $real_group = "root" }
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
default: {
|
default: {
|
||||||
|
|
Loading…
Add table
Reference in a new issue