the previous trick didn't work as tags are dependent in the order of

declaration ( and that's bad (tm) ). This one is safer.

1 files changed, 25 insertions, 20 deletions

diff --git a/modules/openssh/manifests/init.pp b/modules/openssh/manifests/init.pp
index d3d0c78c..de33f72e 100644
--- a/modules/openssh/manifests/init.pp
+++ b/modules/openssh/manifests/init.pp
@@ -1,30 +1,35 @@
 class openssh {
+    class server {
+        # some trick to manage sftp server, who is arch dependent on mdv    
+        $path_to_sftp = "$lib_dir/ssh/"
 
-    # some trick to manage sftp server, who is arch dependent on mdv    
-    $path_to_sftp = "$lib_dir/ssh/"
+        package { "openssh-server":
+            ensure => installed
+        }
 
-    package { "openssh-server":
-        ensure => installed
-    }
+        service { sshd:
+            ensure => running,
+            path => "/etc/init.d/sshd",
+            subscribe => [ Package["openssh-server"] ]
+        }
 
-    service { sshd:
-        ensure => running,
-        path => "/etc/init.d/sshd",
-        subscribe => [ Package["openssh-server"], File["sshd_config"] ]
-    }
 
-    file { "sshd_config":
-        path => "/etc/ssh/sshd_config",
-        ensure => present,
-        owner => root,
-        group => root,
-        mode => 644,
-        require => Package["openssh-server"],
-        content => template("openssh/sshd_config")
+        file { "/etc/ssh/sshd_config":
+            ensure => present,
+            owner => root,
+            group => root,
+            mode => 644,
+            require => Package["openssh-server"],
+            content => template("openssh/sshd_config"),
+            notify => Service["sshd"]
+        }
     }
 
- 
-    class ssh_keys_from_ldap {
+    class ssh_keys_from_ldap inherits server {
+
+        File ["/etc/ssh/sshd_config"] {
+            content => template("openssh/sshd_config","openssh/sshd_config_ldap")
+        }
 
         package { 'python-ldap':
             ensure => installed,