Initial version based on documentation from Neil McBennett. All errors are mine though :-)

Author: erwbgy

.fixtures.yml

@@ -0,0 +1,3 @@
+fixtures:
+  symlinks:
+    jboss: "#{source_dir}"

.gitignore

@@ -0,0 +1,3 @@
+pkg/
+metadata.json
+*.swp

Modulefile

@@ -0,0 +1,8 @@
+name    'erwbgy-pamldap'
+version '0.1.0'
+source 'https://github.com/erwbgy/puppet-pamldap.git'
+author 'erwbgy'
+license 'Apache License, Version 2.0'
+summary 'Use LDAP for user login/authentication/authorisation/name resolution'
+description 'Use LDAP for user login/authentication/authorisation/name resolution'
+project_page 'git.com:erwbgy/puppet-pamldap.git'

README.md

@@ -1,8 +1,9 @@
 # puppet-pamldap
 
-Puppet module to use LDAP for user login/authentication/authorisation and related name resolution
+Puppet module to use LDAP for user login/authentication/authorisation and
+related name resolution
 
 ## Credits
 
-This is based on detailed documentation and setup by my colleague Neil McBennett.  
-He did all the hard work, I just puppetised it.
+This is based on detailed documentation and setup by my colleague Neil
+McBennett.  He did all the hard work, I just puppetised it.

Rakefile

@@ -0,0 +1,2 @@
+require 'rubygems'
+require 'puppetlabs_spec_helper/rake_tasks'

example.yaml

@@ -0,0 +1,4 @@
+pamldap:
+  base_dn: 'dc=sportingbet,dc=com'
+  uris: [ 'ldap://10.7.96.13', 'ldap://10.7.96.14' ]
+

manifests/config.pp

@@ -0,0 +1,40 @@
+class pamldap::config (
+  $base_dn,
+  $uris,
+) {
+  $uris_space = join($uris, ' ')
+  $uris_comma = join($uris, ',')
+  # defaults
+  File {
+    owner => 'root',
+    group => 'root',
+  }
+  file { '/etc/pam.d/system-auth':
+    ensure  => present,
+    mode    => '0444',
+    content => template('pamldap/system-auth.erb'),
+    require => Class['pamldap::install'],
+    notify  => Class['pamldap::service'],
+  }
+  file { '/etc/nsswitch.conf':
+    ensure  => present,
+    mode    => '0444',
+    content => template('pamldap/nsswitch.conf.erb'),
+    require => Class['pamldap::install'],
+    notify  => Class['pamldap::service'],
+  }
+  file { [ '/etc/ldap.conf', '/etc/openldap/ldap.conf' ]:
+    ensure  => present,
+    mode    => '0444',
+    content => template('pamldap/ldap.conf.erb'),
+    require => Class['pamldap::install'],
+    notify  => Class['pamldap::service'],
+  }
+  file { '/etc/sssd/sssd.conf':
+    ensure  => present,
+    mode    => '0444',
+    content => template('pamldap/sssd.conf.erb'),
+    require => Class['pamldap::install'],
+    notify  => Class['pamldap::service'],
+  }
+}

manifests/init.pp

@@ -0,0 +1,11 @@
+class pamldap (
+  $base_dn,
+  $uris,
+) {
+  class { 'pamldap::config':
+    base_dn => $base_dn,
+    uris    => $uris,
+  }
+  include pamldap::install
+  include pamldap::service
+}

manifests/install.pp

@@ -0,0 +1,11 @@
+class pamldap::install {
+  if ! defined(Package['sssd']) {
+    package { 'sssd':  ensure => installed }
+  }
+  if ! defined(Package['sssd-client']) {
+    package { 'sssd-client':  ensure => installed }
+  }
+  if ! defined(Package['openldap-clients']) {
+    package { 'openldap-clients':  ensure => installed }
+  }
+}

manifests/service.pp

@@ -0,0 +1,9 @@
+class pamldap::service {
+  service { 'sssd':
+    ensure     => running,
+    hasstatus  => true,
+    hasrestart => true,
+    enable     => true,
+    require    => Class['pamldap::config'],
+  }
+}