Puppet Class: pam::params

Defined in:
manifests/params.pp

Overview

Class: pam::params

This class is only used to set variables



5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
 
# File 'manifests/params.pp', line 5

class pam::params {

  $valid_ensure_values = [ 'present', 'absent', 'purged' ]

  # base
  $ensure = present
  $service_enable = true
  $service_status = running
  $autoupgrade = false
  $autorestart = true
  $source = undef
  $template = undef
  $source_dir = undef
  $source_dir_purge = undef

  # pam mkhomedir
  $umask = '0022'
  $skel = '/etc/skel'

  # pam access
  $access_template = ''
  $access_source = ''
  $accessfile = '/etc/security/access.conf'
  $debug = false
  $noaudit = false
  $fieldsep = undef
  $listsep = undef
  $nodefgroup = false
  $access_restrictive = false   # if block all users except root should be added by default in pam::access

  # pam limits
  $limits_conf = '/etc/security/limits.conf'
  $limits_conf_d = '/etc/security/limits.d'
  $limits_change_uid = false
  $limits_debug = false
  $limits_noaudit = false
  $limits_utmp_early = false
  $limits_source = 'puppet:///modules/pam/limits.conf'
  $limits_source_d = ''
  $limits_template = ''
  $limits_purge_conf_d = true

  # pam ldap
  $ldapconf_source = ''
  $ldapconf_params = [
    'base dc=example,dc=net',
    'uri ldapi:///',
    'ldap_version 3',
    'rootbinddn cn=manager,dc=example,dc=net',
    'pam_password md5'
  ]
  $ldapconf_template = 'pam/ldap_conf.erb'

  # This mandates which distributions are supported
  # To add support for other distributions simply add
  # a matching regex line to the operatingsystem fact
  case $::operatingsystem {
    'Ubuntu','Debian': {
      # base
      $package = 'libpam-runtime'
      # ldap
      $ldap_package = 'libpam-ldap'
      $ldapd_package = 'libpam-ldapd'
      $pam_auth_update_ldap_source = [
        "puppet:///modules/pam/pam-configs/${::lsbdistcodename}_ldap",
        'puppet:///modules/pam/pam-configs/ldap'
      ]
      $pam_auth_update_mkhomedir_tmpl = 'pam/pam_auth_update/mkhomedir.erb'
      $pam_auth_update_access_tmpl = 'pam/pam_auth_update/access.erb'
      $pam_auth_update_limits_tmpl = 'pam/pam_auth_update/limits.erb'
      $pam_auth_update_dir = '/usr/share/pam-configs'
      $pam_auth_update_mkhomedir_file = "${pam_auth_update_dir}/mkhomedir"
      $pam_auth_update_access_file = "${pam_auth_update_dir}/access"
      $pam_auth_update_limits_file = "${pam_auth_update_dir}/limits"
      $pam_auth_update_ldap_file = "${pam_auth_update_dir}/ldap"
      $pam_auth_update_ldap_template = ''
    }
    default: {
      fail("Unsupported operatingsystem ${::operatingsystem}")
    }
  }

}