Commit Graph

12 Commits

Author SHA1 Message Date
Clark Boylan 87c87b6d64 Retire this repo
The opendev project has been moving away from puppet and this is one of
the puppet modules that is no longer used. To simplify things for us we
are taking the extra step of retiring this repo.

Change-Id: I0d5dd508af2482bc43db9c25bf197dfb7d0eadc4
2022-02-17 11:49:09 -08:00
Clark Boylan 4ef7a6d3bc Simplify service management
This simplification takes advantage of the fact that ensure => running
is equivalent to ensure => true (and similar for stopped and false) to
reduce the number of variables we have to track to ensure a service is
both enabled and running or disabled and stopped.

This also fixes krb5-kpropd to run on boot without waiting for a puppet
pulse.

Change-Id: I7255cd6bd719946b7525bcbbff983038d81b48a6
2019-02-22 14:18:47 -08:00
Clark Boylan 672583bd10 Workaround broken ubuntu packaging
Since ubuntu 16.04 or so the krb5-admin-server package is broken in the
postinst scripts. What happens is they try to set a debconf value if the
defaults file for this service sets RUN_KADMIND to false. Unfortunately
the key/question debconf is setting has no associated templates entry so
package install fails.

We work around this by not setting this value in the defaults file on
newer ubuntu and instead rely on our init system to manage that state.

Change-Id: I0ffe2a2acbe76acb0069df18253367ed2528241f
2019-02-21 17:57:25 -08:00
Colleen Murphy 0e2cbe1259 Fix default admin_server parameter
There is no fdqn fact. Use fqdn instead.

Change-Id: I0134f7adce5ce6c090e1959a958aba1fd4538b24
2018-06-30 21:37:35 +02:00
Paul Belanger 4002c707ec
Add systemd support for krb5-kpropd
Add a systemd script, which is backported from Artful. So good news if
we are still running puppet when ubuntu 18.04 upgrades happen, we can
delete this code.

Change-Id: I806abac132efedfd2b97dea1d0954e6235f26673
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2017-12-15 15:24:44 -05:00
James E. Blair 55eee25951 Don't have the server install the client
This prohibits the client being installed some other way.  If we
want to install afs on a kerberos server, it will want to include
the client.  If we don't want to install afs but we do want to
install kerb clients, we will need to add kerberos::client to the
kdc definition.

Change-Id: I6f2a370b521da08184e388ae0f4ceff363af5c0b
2016-04-14 09:13:30 -07:00
Andrey Nikitin 491ff21d29 Order of the classes parameters is refactored
Order and intendation of those parameters are changed
to follow Puppet Style Guide recommendation [0].
Moreover, it will allow to an user to find much faster
a variable in a list of variables.

[0]. https://docs.puppetlabs.com/guides/style_guide.html

Change-Id: I80d176298cd8897f0d6e8b056823f4ad97fbef44
2016-03-21 13:01:20 +03:00
Colleen Murphy a6e3db8a85 Add Gemfile and puppet 4 checks
In anticipation of puppet 4, start trying to deal with puppet 4 things
that can be helpfully predicted by puppet lint plugins. Also fix lint
errors caught by the puppet-lint-absolute_classname-check gem as well
as arrow alignment errors not caught before.

Change-Id: I0b891a9f89508bca8cd30cb2fb2253779a3661b4
2015-08-03 18:42:39 -07:00
Monty Taylor 696d1c4331 Add support for CentOS
Turns out the krb5-user package is called krb5-workstation on RH.

Change-Id: I663ce7dfcb9663ce24e63c50308df5e51841731c
2015-06-28 13:08:47 -04:00
Mikhail S Medvedev c464b68c29 Add standard puppet module files and .gitreview
This module has been split out from system-config, and additional
    files are added to create a proper puppet module.

    In addition, puppet-lint issues were fixed for manifests/*

    The spec:
    http://specs.openstack.org/openstack-infra/infra-specs/specs/puppet-modules.html

Change-Id: I69129e103857694aab0d1a12d7776b4a5856579d
2015-01-29 09:26:09 -06:00
Monty Taylor 5cb1be47f2 Add AFS
I don't really think this needs any further explanation.

Change-Id: I41378bd320c6c6fad2c981d5cc773486af075c41
2014-10-20 15:13:14 -05:00
Monty Taylor c9aa52cb41 Add Kerberos config
Step one in an AFS cell is getting kerberos working. This does not
provide end-to-end KDC management - the realm still needs to be
created by hand.

Change-Id: I891d784d676ab79e7aca9c883dd9e705a30db6e5
2014-10-20 15:13:14 -05:00