Puppet Class: sys::iptables::ldap

Defined in:
manifests/iptables/ldap.pp

Overview

Class: sys::iptables::ldap

This class sets up Linux firewall rules for hosting an LDAP server. In other words, this class configures iptables to allow incoming connections on TCP ports 389 and 636 (by default).

Parameters

port

The TCP port for LDAP traffic, defaults to 389. Set to false to disable LDAP traffic entirely.

ldaps_port

The TCP port for LDAPS traffic, defaults to 636. Set to false to disable LDAPS traffic entirely.

iniface

Interface for firewall resources, default is undefined.

priority

The priority for the ldap firewall rules, defaults to 100.

source

Source for firewall resources, default is undefined.

Parameters:

  • port (Any) (defaults to: '389')
  • ssl_port (Any) (defaults to: '636')
  • iniface (Any) (defaults to: undef)
  • priority (Any) (defaults to: '100')
  • source (Any) (defaults to: undef) 


26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
 
# File 'manifests/iptables/ldap.pp', line 26

class sys::iptables::ldap(
  $port     = '389',
  $ssl_port = '636',
  $iniface  = undef,
  $priority = '100',
  $source   = undef,
){
  include sys::iptables

  if $port {
    firewall { "${priority} allow ldap":
      action  => 'accept',
      proto   => 'tcp',
      dport   => $port,
      iniface => $iniface,
      source  => $source,
    }
  }

  if $ssl_port {
    firewall { "${priority} allow ldaps":
      action  => 'accept',
      proto   => 'tcp',
      dport   => $ssl_port,
      iniface => $iniface,
      source  => $source,
    }
  }
}