1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
|
class openldap {
define config($content) {
file { $name:
require => Package["openldap-servers"],
content => $content,
notify => Exec["/etc/init.d/ldap check"],
}
}
class common {
package { 'openldap-servers': }
service { ldap:
subscribe => Package['openldap-servers'],
require => Openssl::Self_signed_cert["ldap.$domain"],
}
exec { "/etc/init.d/ldap check":
refreshonly => true,
notify => Service["ldap"],
}
file {"/etc/ssl/openldap/":
ensure => directory,
}
openssl::self_signed_cert{ "ldap.$domain":
directory => "/etc/ssl/openldap/"
}
openldap::config {
'/etc/openldap/slapd.conf': content => "";
'/etc/openldap/mandriva-dit-access.conf': content => "";
'/etc/sysconfig/ldap': content => "";
}
}
class master inherits common {
Openldap::Config['/etc/openldap/mandriva-dit-access.conf'] {
content => template("openldap/mandriva-dit-access.conf"),
}
$ldap_test_password = extlookup("ldap_test_password",'x')
$ldap_test_directory = "/var/lib/ldap/test"
file { "$ldap_test_directory":
ensure => directory,
group => ldap,
owner => ldap,
require => Package["openldap-servers"],
before => Service['ldap'],
}
Openldap::Config['/etc/openldap/slapd.conf'] {
content => template("openldap/slapd.conf", "openldap/slapd.test.conf"),
}
Openldap::Config['/etc/sysconfig/ldap'] {
content => template("openldap/ldap.sysconfig"),
}
if $environment == "test" {
# if we ae in a test vm, we need to fill the directory
# with data
package { "openldap-clients": }
local_script { "init_ldap.sh":
content => template('openldap/init_ldap.sh'),
require => Package["openldap-clients"],
}
exec { "init_ldap.sh":
# taken arbitrary among all possible files
creates => "/var/lib/ldap/objectClass.bdb",
require => Local_script["init_ldap.sh"],
}
}
}
# this define is here only to be exported by slave
# and later used by get_ldap_servers
define exported_slave {
}
# TODO create the user for sync in ldap
# syntaxic sugar
define slave_instance($rid) {
# seems the inheritance do not work as I believe
include openldap::common
class { 'openldap::slave':
rid => $rid,
}
}
class slave($rid) inherits common {
@@openldap::exported_slave { $rid: }
$sync_password = extlookup("ldap_syncuser-$hostname",'x')
# same access rights as master
Openldap::Config['/etc/openldap/mandriva-dit-access.conf'] {
content => template("openldap/mandriva-dit-access.conf"),
}
Openldap::Config['/etc/openldap/slapd.conf'] {
content => template("openldap/slapd.conf",'openldap/slapd.syncrepl.conf'),
}
Openldap::Config['/etc/sysconfig/ldap'] {
content => template("openldap/ldap.sysconfig"),
}
}
}
|
