aboutsummaryrefslogtreecommitdiffstats
path: root/deployment/access_classes
diff options
context:
space:
mode:
authorOlivier Blin <dev@blino.org>2017-02-21 01:45:18 +0100
committerOlivier Blin <dev@blino.org>2017-02-21 01:46:43 +0100
commit46a24792a42345d11d073137a8665e03ffec2cfc (patch)
treefaa797a0caed112487beb25d16c056cfe4891569 /deployment/access_classes
parentaff33f5d63727c767056eee13cffd38b694b329c (diff)
downloadpuppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar
puppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar.gz
puppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar.bz2
puppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar.xz
puppet-46a24792a42345d11d073137a8665e03ffec2cfc.zip
Implicitely allow mga-sysadmin login for all access classes
Like done already for mga-unrestricted_shell_access. There is no easy way to concatenate arrays in puppet, the rules are kept inlined for mga-sysadmin and mga-unrestricted_shell_access.
Diffstat (limited to 'deployment/access_classes')
-rw-r--r--deployment/access_classes/manifests/admin.pp4
-rw-r--r--deployment/access_classes/manifests/iso_makers.pp2
-rw-r--r--deployment/access_classes/manifests/web.pp2
3 files changed, 4 insertions, 4 deletions
diff --git a/deployment/access_classes/manifests/admin.pp b/deployment/access_classes/manifests/admin.pp
index e072281f..186c9c87 100644
--- a/deployment/access_classes/manifests/admin.pp
+++ b/deployment/access_classes/manifests/admin.pp
@@ -1,7 +1,7 @@
-# for server where only admins can connect
+# for server where only admins can connect (allowed by default)
class access_classes::admin {
class { 'pam::multiple_ldap_access':
- access_classes => ['mga-sysadmin']
+ access_classes => []
}
}
diff --git a/deployment/access_classes/manifests/iso_makers.pp b/deployment/access_classes/manifests/iso_makers.pp
index ee8c02de..c645205e 100644
--- a/deployment/access_classes/manifests/iso_makers.pp
+++ b/deployment/access_classes/manifests/iso_makers.pp
@@ -1,5 +1,5 @@
class access_classes::iso_makers {
class { 'pam::multiple_ldap_access':
- access_classes => ['mga-iso_makers','mga-sysadmin']
+ access_classes => ['mga-iso_makers']
}
}
diff --git a/deployment/access_classes/manifests/web.pp b/deployment/access_classes/manifests/web.pp
index 78c6d5e1..fa2c7df5 100644
--- a/deployment/access_classes/manifests/web.pp
+++ b/deployment/access_classes/manifests/web.pp
@@ -1,5 +1,5 @@
class access_classes::web {
class { 'pam::multiple_ldap_access':
- access_classes => ['mga-web','mga-sysadmin']
+ access_classes => ['mga-web']
}
}