Puppet Class: sssd::service::nss

Defined in:
manifests/service/nss.pp

Overview

This class sets up the [nss] section of /etc/sssd.conf. You may only have one of these per system.

The class parameters map directly to SSSD configuration. Full documentation of these configuration options can be found in the sssd.conf(5) man page.

Parameters:

  • description (Optional[String]) (defaults to: undef)
  • debug_level (Optional[Sssd::DebugLevel]) (defaults to: undef)
  • debug_timestamps (Boolean) (defaults to: true)
  • debug_microseconds (Boolean) (defaults to: false)
  • reconnection_retries (Integer) (defaults to: 3)
  • fd_limit (Optional[Integer]) (defaults to: undef)
  • command (Optional[String]) (defaults to: undef)
  • enum_cache_timeout (Integer) (defaults to: 120)
  • entry_cache_nowait_percentage (Integer) (defaults to: 0)
  • entry_negative_timeout (Integer) (defaults to: 15)
  • filter_users (String) (defaults to: 'root')
  • filter_groups (String) (defaults to: 'root')
  • filter_users_in_groups (Boolean) (defaults to: true)
  • override_homedir (Optional[String]) (defaults to: undef)
  • fallback_homedir (Optional[String]) (defaults to: undef)
  • override_shell (Optional[String]) (defaults to: undef)
  • vetoed_shells (Optional[String]) (defaults to: undef)
  • default_shell (Optional[String]) (defaults to: undef)
  • get_domains_timeout (Optional[Integer]) (defaults to: undef)
  • memcache_timeout (Optional[Integer]) (defaults to: undef)
  • user_attributes (Optional[String]) (defaults to: undef)
  • custom_options (Optional[Hash]) (defaults to: undef) —

    If defined, this hash will be used to create the service section instead of the parameters. You must provide all options in the section you want to add. Each entry in the hash will be added as a simple init pair key = value under the section in the sssd.conf file. No error checking will be performed.

Author:



40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
 
# File 'manifests/service/nss.pp', line 40

class sssd::service::nss (
  Optional[String]             $description                   = undef,
  Optional[Sssd::DebugLevel]   $debug_level                   = undef,
  Boolean                      $debug_timestamps              = true,
  Boolean                      $debug_microseconds            = false,
  Integer                      $reconnection_retries          = 3,
  Optional[Integer]            $fd_limit                      = undef,
  Optional[String]             $command                       = undef,
  Integer                      $enum_cache_timeout            = 120,
  Integer                      $entry_cache_nowait_percentage = 0,
  Integer                      $entry_negative_timeout        = 15,
  String                       $filter_users                  = 'root',
  String                       $filter_groups                 = 'root',
  Boolean                      $filter_users_in_groups        = true,
  Optional[String]             $override_homedir              = undef,
  Optional[String]             $fallback_homedir              = undef,
  Optional[String]             $override_shell                = undef,
  Optional[String]             $vetoed_shells                 = undef,
  Optional[String]             $default_shell                 = undef,
  Optional[Integer]            $get_domains_timeout           = undef,
  Optional[Integer]            $memcache_timeout              = undef,
  Optional[String]             $user_attributes               = undef,
  Optional[Hash]               $custom_options                = undef,
) {
  if $custom_options {
    # Use custom options template for backwards compatibility
    $_content = epp(
      "${module_name}/service/custom_options.epp",
      {
        'service_name' => 'nss',
        'options'      => $custom_options,
      },
    )
  } else {
    # Build configuration lines in order (matching expected test output)
    # Debug settings
    $description_line = $description ? { undef => [], default => ["description = ${description}"] }
    $debug_level_line = $debug_level ? { undef => [], default => ["debug_level = ${debug_level}"] }
    $debug_timestamps_line = ["debug_timestamps = ${debug_timestamps}"]
    $debug_microseconds_line = ["debug_microseconds = ${debug_microseconds}"]

    # Connection settings
    $reconnection_retries_line = ["reconnection_retries = ${reconnection_retries}"]
    $fd_limit_line = $fd_limit ? { undef => [], default => ["fd_limit = ${fd_limit}"] }
    $command_line = $command ? { undef => [], default => ["command = ${command}"] }

    # Cache settings
    $enum_cache_timeout_line = ["enum_cache_timeout = ${enum_cache_timeout}"]
    $entry_cache_nowait_percentage_line = ["entry_cache_nowait_percentage = ${entry_cache_nowait_percentage}"]
    $entry_negative_timeout_line = ["entry_negative_timeout = ${entry_negative_timeout}"]

    # Filter settings
    $filter_users_line = ["filter_users = ${filter_users}"]
    $filter_groups_line = ["filter_groups = ${filter_groups}"]
    $filter_users_in_groups_line = ["filter_users_in_groups = ${filter_users_in_groups}"]

    # Home directory settings
    $override_homedir_line = $override_homedir ? { undef => [], default => ["override_homedir = ${override_homedir}"] }
    $fallback_homedir_line = $fallback_homedir ? { undef => [], default => ["fallback_homedir = ${fallback_homedir}"] }

    # Shell settings
    $override_shell_line = $override_shell ? { undef => [], default => ["override_shell = ${override_shell}"] }
    $vetoed_shells_line = $vetoed_shells ? { undef => [], default => ["vetoed_shells = ${vetoed_shells}"] }
    $default_shell_line = $default_shell ? { undef => [], default => ["default_shell = ${default_shell}"] }

    # Timeout and attribute settings
    $get_domains_timeout_line = $get_domains_timeout ? { undef => [], default => ["get_domains_timeout = ${get_domains_timeout}"] }
    $memcache_timeout_line = $memcache_timeout ? { undef => [], default => ["memcache_timeout = ${memcache_timeout}"] }
    $user_attributes_line = $user_attributes ? { undef => [], default => ["user_attributes = ${user_attributes}"] }

    # Combine all lines in order
    $config_lines = (
      $description_line +
      $debug_level_line +
      $debug_timestamps_line +
      $debug_microseconds_line +
      $reconnection_retries_line +
      $fd_limit_line +
      $command_line +
      $enum_cache_timeout_line +
      $entry_cache_nowait_percentage_line +
      $entry_negative_timeout_line +
      $filter_users_line +
      $filter_groups_line +
      $filter_users_in_groups_line +
      $override_homedir_line +
      $fallback_homedir_line +
      $override_shell_line +
      $vetoed_shells_line +
      $default_shell_line +
      $get_domains_timeout_line +
      $memcache_timeout_line +
      $user_attributes_line
    )

    # Join all configuration lines
    $content = (['# sssd::service::nss'] + $config_lines).join("\n")

    $_content = epp(
      "${module_name}/generic.epp",
      {
        'title'   => 'nss',
        'content' => $content,
      },
    )
  }

  sssd::config::entry { 'puppet_service_nss':
    content => $_content,
  }
}