Make pam::multiple_ldap_access a class instead of a define

pam::multiple_ldap_access can only be included once. If it is included
multiple time, the value of the variable $access_classes used in
templates/system-auth is random. As it can only be included once, it
should be a parameterized class and not a defined resource.

1 files changed, 1 insertions, 1 deletions

diff --git a/deployment/access_classes/manifests/admin.pp b/deployment/access_classes/manifests/admin.pp
index 4b9c8f87..73a78303 100644
--- a/deployment/access_classes/manifests/admin.pp
+++ b/deployment/access_classes/manifests/admin.pp
@@ -1,6 +1,6 @@
 # for server where only admins can connect
 class access_classes::admin {
-    pam::multiple_ldap_access { 'admin':
+    class { pam::multiple_ldap_access:
         access_classes => ['mga-sysadmin']
     }
 }