diff options
| author | Olivier Blin <dev@blino.org> | 2017-02-21 01:45:18 +0100 |
|---|---|---|
| committer | Olivier Blin <dev@blino.org> | 2017-02-21 01:46:43 +0100 |
| commit | 46a24792a42345d11d073137a8665e03ffec2cfc (patch) | |
| tree | faa797a0caed112487beb25d16c056cfe4891569 /deployment | |
| parent | aff33f5d63727c767056eee13cffd38b694b329c (diff) | |
| download | puppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar puppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar.gz puppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar.bz2 puppet-46a24792a42345d11d073137a8665e03ffec2cfc.tar.xz puppet-46a24792a42345d11d073137a8665e03ffec2cfc.zip | |
Implicitely allow mga-sysadmin login for all access classes
Like done already for mga-unrestricted_shell_access.
There is no easy way to concatenate arrays in puppet, the rules are
kept inlined for mga-sysadmin and mga-unrestricted_shell_access.
Diffstat (limited to 'deployment')
| -rw-r--r-- | deployment/access_classes/manifests/admin.pp | 4 | ||||
| -rw-r--r-- | deployment/access_classes/manifests/iso_makers.pp | 2 | ||||
| -rw-r--r-- | deployment/access_classes/manifests/web.pp | 2 |
3 files changed, 4 insertions, 4 deletions
diff --git a/deployment/access_classes/manifests/admin.pp b/deployment/access_classes/manifests/admin.pp index e072281f..186c9c87 100644 --- a/deployment/access_classes/manifests/admin.pp +++ b/deployment/access_classes/manifests/admin.pp @@ -1,7 +1,7 @@ -# for server where only admins can connect +# for server where only admins can connect (allowed by default) class access_classes::admin { class { 'pam::multiple_ldap_access': - access_classes => ['mga-sysadmin'] + access_classes => [] } } diff --git a/deployment/access_classes/manifests/iso_makers.pp b/deployment/access_classes/manifests/iso_makers.pp index ee8c02de..c645205e 100644 --- a/deployment/access_classes/manifests/iso_makers.pp +++ b/deployment/access_classes/manifests/iso_makers.pp @@ -1,5 +1,5 @@ class access_classes::iso_makers { class { 'pam::multiple_ldap_access': - access_classes => ['mga-iso_makers','mga-sysadmin'] + access_classes => ['mga-iso_makers'] } } diff --git a/deployment/access_classes/manifests/web.pp b/deployment/access_classes/manifests/web.pp index 78c6d5e1..fa2c7df5 100644 --- a/deployment/access_classes/manifests/web.pp +++ b/deployment/access_classes/manifests/web.pp @@ -1,5 +1,5 @@ class access_classes::web { class { 'pam::multiple_ldap_access': - access_classes => ['mga-web','mga-sysadmin'] + access_classes => ['mga-web'] } } |