]>
Commit | Line | Data |
---|---|---|
54806111 IB |
1 | class base_installation::puppet ( |
2 | $password_seed = $base_installation::puppet_pass_seed | |
3 | ) inherits base_installation { | |
4 | File { | |
5 | mode => "0600", | |
6 | owner => "root", | |
7 | group => "root", | |
8 | } | |
9 | ||
10 | exec { 'generate_password_seed': | |
11 | command => "/usr/bin/openssl rand -base64 -out $password_seed 256", | |
12 | creates => $password_seed, | |
13 | environment => "RANDFILE=/dev/null", | |
14 | } | |
15 | ||
16 | unless empty(find_file($password_seed)) { | |
17 | $ldap_password = generate_password(24, $password_seed, "ldap") | |
18 | $ssha_ldap_seed = generate_password(5, $password_seed, "ldap_seed") | |
19 | ||
20 | package { 'gem:ruby-ldap': | |
21 | name => "ruby-ldap", | |
22 | ensure => present, | |
23 | provider => "gem", | |
24 | install_options => "--no-user-install" | |
25 | } | |
26 | ||
27 | file { $password_seed: | |
28 | mode => "0600", | |
29 | } | |
30 | ||
31 | file { $base_installation::puppet_conf_path: | |
32 | ensure => directory, | |
33 | require => [Package["puppet"], Package["gem:ruby-ldap"]], | |
34 | recurse => true, | |
35 | purge => true, | |
36 | force => true, | |
37 | } | |
38 | ||
39 | file { "$base_installation::puppet_conf_path/puppet.conf": | |
40 | content => template("base_installation/puppet/puppet.conf.erb"), | |
41 | require => File[$base_installation::puppet_conf_path], | |
42 | } | |
43 | ||
44 | file { "$base_installation::puppet_conf_path/host_ldap.info": | |
45 | content => template("base_installation/puppet/host_ldap.info.erb"), | |
46 | require => File[$base_installation::puppet_conf_path], | |
47 | notify => Notify_refresh["notify-ldap-password"], | |
48 | } | |
49 | ||
50 | notify_refresh { "notify-ldap-password": | |
51 | message => template("base_installation/puppet/host_ldap.info.erb"), | |
52 | refreshonly => true | |
53 | } | |
54 | } | |
55 | } |