Puppet Class: sssd::service::nss

Defined in:
manifests/service/nss.pp

Overview

This class sets up the [nss] section of /etc/sssd.conf. You may only have one of these per system.

The class parameters map directly to SSSD configuration. Full documentation of these configuration options can be found in the sssd.conf(5) man page.

Parameters:

  • description (Optional[String]) (defaults to: undef)
  • debug_level (Optional[Sssd::DebugLevel]) (defaults to: undef)
  • debug_timestamps (Boolean) (defaults to: true)
  • debug_microseconds (Boolean) (defaults to: false)
  • reconnection_retries (Integer) (defaults to: 3)
  • fd_limit (Optional[Integer]) (defaults to: undef)
  • command (Optional[String]) (defaults to: undef)
  • enum_cache_timeout (Integer) (defaults to: 120)
  • entry_cache_nowait_percentage (Integer) (defaults to: 0)
  • entry_negative_timeout (Integer) (defaults to: 15)
  • filter_users (String) (defaults to: 'root')
  • filter_groups (String) (defaults to: 'root')
  • filter_users_in_groups (Boolean) (defaults to: true)
  • override_homedir (Optional[String]) (defaults to: undef)
  • fallback_homedir (Optional[String]) (defaults to: undef)
  • override_shell (Optional[String]) (defaults to: undef)
  • vetoed_shells (Optional[String]) (defaults to: undef)
  • default_shell (Optional[String]) (defaults to: undef)
  • get_domains_timeout (Optional[Integer]) (defaults to: undef)
  • memcache_timeout (Optional[Integer]) (defaults to: undef)
  • user_attributes (Optional[String]) (defaults to: undef)
  • custom_options (Optional[Hash]) (defaults to: undef) —

    If defined, this hash will be used to create the service section instead of the parameters. You must provide all options in the section you want to add. Each entry in the hash will be added as a simple init pair key = value under the section in the sssd.conf file. No error checking will be performed.

Author:



40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
 
# File 'manifests/service/nss.pp', line 40

class sssd::service::nss (
  Optional[String]             $description                   = undef,
  Optional[Sssd::DebugLevel]   $debug_level                   = undef,
  Boolean                      $debug_timestamps              = true,
  Boolean                      $debug_microseconds            = false,
  Integer                      $reconnection_retries          = 3,
  Optional[Integer]            $fd_limit                      = undef,
  Optional[String]             $command                       = undef,
  Integer                      $enum_cache_timeout            = 120,
  Integer                      $entry_cache_nowait_percentage = 0,
  Integer                      $entry_negative_timeout        = 15,
  String                       $filter_users                  = 'root',
  String                       $filter_groups                 = 'root',
  Boolean                      $filter_users_in_groups        = true,
  Optional[String]             $override_homedir              = undef,
  Optional[String]             $fallback_homedir              = undef,
  Optional[String]             $override_shell                = undef,
  Optional[String]             $vetoed_shells                 = undef,
  Optional[String]             $default_shell                 = undef,
  Optional[Integer]            $get_domains_timeout           = undef,
  Optional[Integer]            $memcache_timeout              = undef,
  Optional[String]             $user_attributes               = undef,
  Optional[Hash]               $custom_options                = undef
) {
  if $custom_options {
    $_content = epp("${module_name}/service/custom_options.epp", {
        'service_name' => 'nss',
        'options'      => $custom_options
      })
  } else {
    $_content = template("${module_name}/service/nss.erb")
  }

  sssd::config::entry { 'puppet_service_nss':
    content => $_content
  }
}