package { [ 'ed', 'libpam-krb5', 'libpam-script' ]:
ensure => present,
}
exec {'pam-auth-update':
path => "/bin:/sbin:/usr/bin:/usr/sbin",
command => "pam-auth-update"
}
file {"/usr/share/pam-configs/scripts":
# Konfigurační skript pro PAM
ensure => present,
owner => root,
group => root,
mode => 644,
content => '
Name: Session Script Management
Default: yes
Priority: 10
Session-Interactive-Only: yes
Session-Type: Additional
Session-Final:
optional pam_script.so dir=/etc/pam-scripts
',
notify => Exec['pam-auth-update'],
require => Package['libpam-scripts'],
}
exec { "krb5-update":
path => "/usr/bin:/usr/sbin:/bin:/usr/local/bin:/usr/local/sbin",
command => "ed /usr/share/pam-configs/krb5 2>/dev/null <<-EOF
/Priority
d
i
Priority: 128
.
w
q
EOF
",
onlyif => "test 0 -eq $(grep -c 'Priority: 128' /usr/share/pam-configs/krb5)",
notify => Exec['pam-auth-update'],
require => Package['ed','libpam-krb5'],
logoutput => true,
}