} ->
file { "/etc/pam_ldap.d/postgresql.conf":
ensure => "present",
- mode => "0644",
- owner => "root",
+ mode => "0600",
+ owner => $::profile::postgresql::pg_user,
group => "root",
content => template("role/cryptoportfolio/pam_ldap_postgresql.conf.erb"),
} ->