class restrictshell { $allow_svn = "0" $allow_git = "0" $allow_rsync = "0" $allow_pkgsubmit = "0" $ldap_pwfile = "/etc/ldap.secret" class allow_svn_git_pkgsubmit { $allow_svn = "1" $allow_git = "1" $allow_pkgsubmit = "1" } file { '/usr/local/bin/sv_membersh.pl': ensure => present, owner => root, group => root, mode => 755, content => template("restrictshell/sv_membersh.pl"), } file { '/etc/membersh-conf.pl': ensure => present, owner => root, group => root, mode => 755, content => template("restrictshell/membersh-conf.pl"), } package { 'python-ldap': ensure => installed, } $pubkeys_directory = "/var/lib/pubkeys" file { $pubkeys_directory: ensure => directory, owner => root, group => root, mode => 755, } file { '/usr/local/bin/ldap-sshkey2file.py': ensure => present, owner => root, group => root, mode => 755, content => template("restrictshell/ldap-sshkey2file.py"), requires => Package['python-ldap'] } }