From: Ismaël Bouya <ismael.bouya@normalesup.org>
Date: Sun, 1 Jul 2018 09:35:47 +0000 (+0200)
Subject: Allow to connect when ldap is not available
X-Git-Url: https://git.immae.eu/?a=commitdiff_plain;h=25c99a635507abfe6af4a1f0a9fc5a103d1880c0;p=perso%2FImmae%2FProjets%2FPuppet.git

Allow to connect when ldap is not available
---

diff --git a/modules/base_installation/manifests/ldap.pp b/modules/base_installation/manifests/ldap.pp
index 5a35327..9291402 100644
--- a/modules/base_installation/manifests/ldap.pp
+++ b/modules/base_installation/manifests/ldap.pp
@@ -43,9 +43,9 @@ class base_installation::ldap inherits base_installation {
         ensure    => present,
         service   => $service,
         type      => "password",
-        control   => "[success=done new_authtok_reqd=ok ignore=ignore default=bad]",
+        control   => "[success=done new_authtok_reqd=ok authinfo_unavail=ignore ignore=ignore default=bad]",
         module    => "pam_ldap.so",
-        arguments => "ignore_unknown_user",
+        arguments => ["ignore_unknown_user", "ignore_authinfo_unavail"],
         position  => 'before *[type="password" and module="pam_unix.so"]',
         require   => Package["ruby-augeas"],
       }
@@ -57,9 +57,9 @@ class base_installation::ldap inherits base_installation {
           ensure    => present,
           service   => $service,
           type      => $type,
-          control   => "[success=done new_authtok_reqd=ok ignore=ignore default=bad]",
+          control   => "[success=done new_authtok_reqd=ok authinfo_unavail=ignore ignore=ignore default=bad]",
           module    => "pam_ldap.so",
-          arguments => "ignore_unknown_user",
+          arguments => ["ignore_unknown_user", "ignore_authinfo_unavail"],
           position  => "before *[type=\"$type\" and module=\"pam_unix.so\"]",
           require   => Package["ruby-augeas"],
         }