blob: 5a41065f0e8739b53fd2a67ab2dd4ece5d0695f9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
require 'puppet/provider/ldap'
Puppet::Type.type(:group).provide :ldap, :parent => Puppet::Provider::Ldap do
desc "Group management via ``ldap``.
This provider requires that you have valid values for all of the
ldap-related settings, including ``ldapbase``. You will also almost
definitely need settings for ``ldapuser`` and ``ldappassword``, so that
your clients can write to ldap.
Note that this provider will automatically generate a GID for you if you do
not specify one, but it is a potentially expensive operation, as it
iterates across all existing groups to pick the appropriate next one.
"
confine :true => Puppet.features.ldap?, :false => (Puppet[:ldapuser] == "")
# We're mapping 'members' here because we want to make it
# easy for the ldap user provider to manage groups. This
# way it can just use the 'update' method in the group manager,
# whereas otherwise it would need to replicate that code.
manages(:posixGroup).at("ou=Groups").and.maps :name => :cn, :gid => :gidNumber, :members => :memberUid
# Find the next gid after the current largest gid.
provider = self
manager.generates(:gidNumber).with do
largest = 500
if existing = provider.manager.search
existing.each do |hash|
next unless value = hash[:gid]
num = value[0].to_i
if num > largest
largest = num
end
end
end
largest + 1
end
# Convert a group name to an id.
def self.name2id(group)
return nil unless result = manager.search("cn=%s" % group) and result.length > 0
# Only use the first result.
group = result[0]
gid = group[:gid][0]
return gid
end
end
|
