init.pp
View Options

	# Class: sudo
	#
	# This module manages sudo
	#
	# Parameters:
	# [ensure]
	# Ensure if present or absent.
	# Default: present
	#
	# [package]
	# Name of the package.
	# Only set this, if your platform is not supported or you know,
	# what you're doing.
	# Default: auto-set, platform specific
	#
	# [package_ensure]
	# Allows you to ensure a particular version of a package
	# Default: present / lastest for RHEL < 5.5
	#
	# [package_source]
	# Where to find the package. Only set this on AIX (required) and
	# Solaris (required) or if your platform is not supported or you
	# know, what you're doing.
	#
	# The default for aix is the perzl sudo package. For solaris 10 we
	# use the official www.sudo.ws binary package.
	#
	# Default: AIX: perzl.org
	# Solaris: www.sudo.ws
	#
	# [package_admin_file]
	# Where to find a Solaris 10 package admin file for
	# an unattended installation. We do not supply a default file, so
	# this has to be staged separately
	#
	# Only set this on Solaris 10 (required)
	# Default: /var/sadm/install/admin/puppet
	#
	# [purge]
	# Whether or not to purge sudoers.d directory
	# Default: true
	#
	# [purge_ignore]
	# Files to exclude from purging in sudoers.d directory
	# Default: undef
	#
	# [config_file]
	# Main configuration file.
	# Only set this, if your platform is not supported or you know,
	# what you're doing.
	# Default: auto-set, platform specific
	#
	# [config_dir]
	# Main directory containing sudo snippets, imported via
	# includedir stanza in sudoers file
	# Default: auto-set, platform specific
	#
	# [extra_include_dirs]
	# Array of additional directories containing sudo snippets
	# Default: undef
	#
	# [content]
	# Alternate content file location
	# Only set this, if your platform is not supported or you know,
	# what you're doing.
	# Default: auto-set, platform specific
	#
	# [ldap_enable]
	# Enable ldap support on the package
	# Default: false
	#
	# Actions:
	# Installs sudo package and checks the state of sudoers file and
	# sudoers.d directory.
	#
	# Requires:
	# Nothing
	#
	# Sample Usage:
	# class { 'sudo': }
	#
	# [Remember: No empty lines between comments and class definition]
	class sudo(
	Boolean $enable = true,
	String $package = $sudo::params::package,
	String $package_ldap = $sudo::params::package_ldap,
	String $package_ensure = $sudo::params::package_ensure,
	Optional[String] $package_source = $sudo::params::package_source,
	Optional[String] $package_admin_file = $sudo::params::package_admin_file,
	Boolean $purge = true,
	Optional[String] $purge_ignore = undef,
	String $config_file = $sudo::params::config_file,
	Boolean $config_file_replace = true,
	String $config_dir = $sudo::params::config_dir,
	Optional[Array[String]] $extra_include_dirs = undef,
	String $content = $sudo::params::content,
	Boolean $ldap_enable = false,
	) inherits sudo::params {


	case $enable {
	true: {
	$dir_ensure = 'directory'
	$file_ensure = 'present'
	}
	false: {
	$dir_ensure = 'absent'
	$file_ensure = 'absent'
	}
	default: { fail('no $enable is set') }
	}

	case $ldap_enable {
	true: {
	if $package_ldap == undef {
	fail('on your os ldap support for sudo is not yet supported')
	}
	$package_real = $package_ldap
	}
	false: {
	$package_real = $package
	}
	default: { fail('no $ldap_enable is set') }
	}


	class { '::sudo::package':
	package => $package_real,
	package_ensure => $package_ensure,
	package_source => $package_source,
	package_admin_file => $package_admin_file,
	ldap_enable => $ldap_enable,
	}

	file { $config_file:
	ensure => $file_ensure,
	owner => 'root',
	group => $sudo::params::config_file_group,
	mode => '0440',
	replace => $config_file_replace,
	content => template($content),
	require => Class['sudo::package'],
	}

	file { $config_dir:
	ensure => $dir_ensure,
	owner => 'root',
	group => $sudo::params::config_file_group,
	mode => '0550',
	recurse => $purge,
	purge => $purge,
	ignore => $purge_ignore,
	require => Class['sudo::package'],
	}

	# Load the Hiera based sudoer configuration (if enabled and present)
	#
	# NOTE: We must use 'include' here to avoid circular dependencies with
	# sudo::conf
	#
	# NOTE: There is no way to detect the existence of hiera. This automatic
	# functionality is therefore made exclusive to Puppet 3+ (hiera is embedded)
	# in order to preserve backwards compatibility.
	#
	# http://projects.puppetlabs.com/issues/12345
	#
	if (versioncmp($::puppetversion, '3') != -1) {
	include '::sudo::configs'
	}

	anchor { 'sudo::begin': }
	-> Class['sudo::package']
	-> anchor { 'sudo::end': }
	}

File Metadata

Mime Type: text/plain
Expires: Jun 4 2025, 6:38 PM (14 w, 2 d ago)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 3398681

init.pp
No OneTemporary
Actions

init.pp
View Options

File Metadata

Event Timeline

init.ppNo OneTemporaryActions

init.ppView Options

File Metadata

Event Timeline

init.pp
No OneTemporary
Actions

init.pp
View Options