Make pam::multiple_ldap_access a class instead of a define

pam::multiple_ldap_access can only be included once. If it is included
multiple time, the value of the variable $access_classes used in
templates/system-auth is random. As it can only be included once, it
should be a parameterized class and not a defined resource.

1 files changed, 1 insertions, 1 deletions

diff --git a/deployment/access_classes/manifests/web_and_artwork.pp b/deployment/access_classes/manifests/web_and_artwork.pp
index 9a85bd3d..b6ac6e5b 100644
--- a/deployment/access_classes/manifests/web_and_artwork.pp
+++ b/deployment/access_classes/manifests/web_and_artwork.pp
@@ -1,5 +1,5 @@
 class access_classes::web_and_artwork {
-    pam::multiple_ldap_access { 'web_artwork':
+    class { pam::multiple_ldap_access:
         access_classes => ['mga-web','mga-sysadmin','mga-artwork']
     }
 }