+class base_installation::puppet (
+ $password_seed = $base_installation::puppet_pass_seed
+) inherits base_installation {
+ File {
+ mode => "0600",
+ owner => "root",
+ group => "root",
+ }
+
+ exec { 'generate_password_seed':
+ command => "/usr/bin/openssl rand -base64 -out $password_seed 256",
+ creates => $password_seed,
+ environment => "RANDFILE=/dev/null",
+ }
+
+ unless empty(find_file($password_seed)) {
+ $ldap_password = generate_password(24, $password_seed, "ldap")
+ $ssha_ldap_seed = generate_password(5, $password_seed, "ldap_seed")
+
+ package { 'gem:ruby-ldap':
+ name => "ruby-ldap",
+ ensure => present,
+ provider => "gem",
+ install_options => "--no-user-install"
+ }
+
+ file { $password_seed:
+ mode => "0600",
+ }
+
+ file { $base_installation::puppet_conf_path:
+ ensure => directory,
+ require => [Package["puppet"], Package["gem:ruby-ldap"]],
+ recurse => true,
+ purge => true,
+ force => true,
+ }
+
+ file { "$base_installation::puppet_conf_path/puppet.conf":
+ content => template("base_installation/puppet/puppet.conf.erb"),
+ require => File[$base_installation::puppet_conf_path],
+ }
+
+ file { "$base_installation::puppet_conf_path/host_ldap.info":
+ content => template("base_installation/puppet/host_ldap.info.erb"),
+ require => File[$base_installation::puppet_conf_path],
+ notify => Notify_refresh["notify-ldap-password"],
+ }
+
+ notify_refresh { "notify-ldap-password":
+ message => template("base_installation/puppet/host_ldap.info.erb"),
+ refreshonly => true
+ }
+ }
+}