aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Scherer <misc@mageia.org>2010-11-22 02:04:04 +0000
committerMichael Scherer <misc@mageia.org>2010-11-22 02:04:04 +0000
commit9395c9d231dd4849d8ceaa33c687bf006212592d (patch)
tree17e15415d47691ed537ed25e01b1b42a0772031e
parent79028a21adb37cf4873edee55a305d2d777f6504 (diff)
downloadpuppet-9395c9d231dd4849d8ceaa33c687bf006212592d.tar
puppet-9395c9d231dd4849d8ceaa33c687bf006212592d.tar.gz
puppet-9395c9d231dd4849d8ceaa33c687bf006212592d.tar.bz2
puppet-9395c9d231dd4849d8ceaa33c687bf006212592d.tar.xz
puppet-9395c9d231dd4849d8ceaa33c687bf006212592d.zip
- add nssldap password handling
-rw-r--r--modules/pam/manifests/init.pp3
-rw-r--r--modules/pam/templates/ldap.conf3
2 files changed, 5 insertions, 1 deletions
diff --git a/modules/pam/manifests/init.pp b/modules/pam/manifests/init.pp
index 210526c9..20a8f58a 100644
--- a/modules/pam/manifests/init.pp
+++ b/modules/pam/manifests/init.pp
@@ -20,6 +20,9 @@ class pam {
mode => 644,
content => template("pam/nsswitch.conf")
}
+
+ $nssldap_password = extlookup("nssldap_password")
+
file { "ldap.conf":
path => "/etc/ldap.conf",
owner => root,
diff --git a/modules/pam/templates/ldap.conf b/modules/pam/templates/ldap.conf
index 35575845..61f1bee7 100644
--- a/modules/pam/templates/ldap.conf
+++ b/modules/pam/templates/ldap.conf
@@ -1,4 +1,5 @@
-
+binddn uid=nssldap,ou=System Accounts,<%= dc_suffix %>
+bindpw <%= nssldap_password %>
uri ldaps://ldap.<%= domain %>
base <%= dc_suffix %>
pam_lookup_policy no