aboutsummaryrefslogtreecommitdiffstats
path: root/modules/pam/manifests/init.pp
diff options
context:
space:
mode:
Diffstat (limited to 'modules/pam/manifests/init.pp')
-rw-r--r--modules/pam/manifests/init.pp26
1 files changed, 0 insertions, 26 deletions
diff --git a/modules/pam/manifests/init.pp b/modules/pam/manifests/init.pp
index 732957c4..246bb4f6 100644
--- a/modules/pam/manifests/init.pp
+++ b/modules/pam/manifests/init.pp
@@ -47,30 +47,4 @@ class pam {
define multiple_ldap_access($access_classes) {
include base
}
-
- # beware , this two classes are exclusives
- # if you need multiple group access, you need to define you own class
- # of access
-
- # for server where only admins can connect
- class admin_access {
- multiple_ldap_access { "admin_access":
- access_classes => ['mga-sysadmin']
- }
- }
-
- # for server where people can connect with ssh ( git, svn )
- class committers_access {
- # this is required, as we force the shell to be the restricted one
- # openssh will detect if the file do not exist and while refuse to log the
- # user, and erase the password ( see pam_auth.c in openssh code, seek badpw )
- # so the file must exist
- # permission to use svn, git, etc must be added separatly
-
- include restrictshell::shell
-
- multiple_ldap_access { "committers_access":
- access_classes => ['mga-commiters']
- }
- }
}