aboutsummaryrefslogtreecommitdiffstats
path: root/modules/restrictshell/manifests/init.pp
diff options
context:
space:
mode:
authorMichael Scherer <misc@mageia.org>2010-11-23 23:17:47 +0000
committerMichael Scherer <misc@mageia.org>2010-11-23 23:17:47 +0000
commit0b64c47717c4483cc519e0f739bf0d4972f2277a (patch)
tree8ce211f47cf71c609ce9d9e2fc4919d8c7025fd3 /modules/restrictshell/manifests/init.pp
parent0773748d9802ba93ed2594f9807cd8064aeecfe5 (diff)
downloadpuppet-0b64c47717c4483cc519e0f739bf0d4972f2277a.tar
puppet-0b64c47717c4483cc519e0f739bf0d4972f2277a.tar.gz
puppet-0b64c47717c4483cc519e0f739bf0d4972f2277a.tar.bz2
puppet-0b64c47717c4483cc519e0f739bf0d4972f2277a.tar.xz
puppet-0b64c47717c4483cc519e0f739bf0d4972f2277a.zip
move the ldap key from ssh logic to openssh module ( more logical ), and add the hook in openssh config file
Diffstat (limited to 'modules/restrictshell/manifests/init.pp')
-rw-r--r--modules/restrictshell/manifests/init.pp37
1 files changed, 0 insertions, 37 deletions
diff --git a/modules/restrictshell/manifests/init.pp b/modules/restrictshell/manifests/init.pp
index c87664a7..faaa8bd0 100644
--- a/modules/restrictshell/manifests/init.pp
+++ b/modules/restrictshell/manifests/init.pp
@@ -23,43 +23,6 @@ class restrictshell {
content => template("restrictshell/membersh-conf.pl"),
}
}
-
- class ssh_keys_from_ldap {
-
- package { 'python-ldap':
- ensure => installed,
- }
-
- $pubkeys_directory = "/var/lib/pubkeys"
- file { $pubkeys_directory:
- ensure => directory,
- owner => root,
- group => root,
- mode => 755,
- }
-
- file { "$pubkeys_directory/root":
- ensure => directory,
- owner => root,
- group => root,
- mode => 700,
- }
-
- file { "$pubkeys_directory/root/authorized_keys":
- ensure => "/root/.ssh/authorized_keys",
- mode => 700,
- }
-
- $ldap_pwfile = "/etc/ldap.secret"
- file { '/usr/local/bin/ldap-sshkey2file.py':
- ensure => present,
- owner => root,
- group => root,
- mode => 755,
- content => template("restrictshell/ldap-sshkey2file.py"),
- requires => Package['python-ldap']
- }
- }
define allow {
include shell