From b0f50a11a982cf1d2288b8252a7c8cb53e4f0782 Mon Sep 17 00:00:00 2001
From: Michael Scherer <misc@mageia.org>
Date: Mon, 22 Nov 2010 13:15:24 +0000
Subject: - set the ldap password in /etc/ldap.secret

---
 modules/pam/manifests/init.pp | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/modules/pam/manifests/init.pp b/modules/pam/manifests/init.pp
index abe89b30..60efbbf3 100644
--- a/modules/pam/manifests/init.pp
+++ b/modules/pam/manifests/init.pp
@@ -26,7 +26,14 @@ class pam {
          content => template("pam/nsswitch.conf")
       }
 
-      $nssldap_password = extlookup("nssldap_password",'x')
+      $ldap_password = extlookup("${fqdn}_ldap_password",'x')
+      file { "ldap.secret":
+         path => "/etc/ldap.secret",
+         owner => root,
+         group => root,
+         mode => 600,
+         content => $ldap_password
+      }
  
       file { "ldap.conf":
          path => "/etc/ldap.conf",
-- 
cgit v1.2.1