- add a proto module for taking care of pam ( need pam_ldap, etc support, and a review of the pam config file too )

1 files changed, 27 insertions, 0 deletions

diff --git a/modules/pam/manifests/init.pp b/modules/pam/manifests/init.pp
new file mode 100644
index 00000000..4c68a80c
--- /dev/null
+++ b/modules/pam/manifests/init.pp
@@ -0,0 +1,27 @@
+class pam {
+
+  package { ["pam_ldap","nss_ldap", "pam_mkhomedir"]:
+    ensure => installed,  
+  }
+
+
+  file { "system-auth":
+     path => "/etc/pam.d/system-auth",
+     owner => root,
+     group => root,
+     mode => 644,
+     content => template("openldap/system-auth")
+  }
+  
+  # for server where only admin can connect
+  class admin_access {
+    $access_class = "admin"
+    file { "system-auth": }
+  }
+
+  # for server where people can connect with ssh ( git, svn )
+  class commiters_access {
+    $access_class = "commiters"
+    file { "system-auth": }
+  }
+}