Make pam::multiple_ldap_access a class instead of a define

pam::multiple_ldap_access can only be included once. If it is included
multiple time, the value of the variable $access_classes used in
templates/system-auth is random. As it can only be included once, it
should be a parameterized class and not a defined resource.

1 files changed, 1 insertions, 1 deletions

diff --git a/deployment/access_classes/manifests/committers.pp b/deployment/access_classes/manifests/committers.pp
index 81dbdb13..f57f7d50 100644
--- a/deployment/access_classes/manifests/committers.pp
+++ b/deployment/access_classes/manifests/committers.pp
@@ -7,7 +7,7 @@ class access_classes::committers {
     # so the file must exist
     # permission to use svn, git, etc must be added separatly
 
-    pam::multiple_ldap_access { 'committers':
+    class { pam::multiple_ldap_access:
         access_classes   => ['mga-shell_access'],
         restricted_shell => true,
     }