pam/manifests/init.pp

class pam {

  package { ["pam_ldap","nss_ldap", "pam_mkhomedir"]:
    ensure => installed,  
  }


  file { "system-auth":
     path => "/etc/pam.d/system-auth",
     owner => root,
     group => root,
     mode => 644,
     content => template("openldap/system-auth")
  }
  
  # for server where only admin can connect
  class admin_access {
    $access_class = "admin"
    file { "system-auth": }
  }

  # for server where people can connect with ssh ( git, svn )
  class commiters_access {
    $access_class = "commiters"
    file { "system-auth": }
  }
}
1	class pam {
2
3	package { ["pam_ldap","nss_ldap", "pam_mkhomedir"]:
4	ensure => installed,
5	}
6
7
8	file { "system-auth":
9	path => "/etc/pam.d/system-auth",
10	owner => root,
11	group => root,
12	mode => 644,
13	content => template("openldap/system-auth")
14	}
15
16	# for server where only admin can connect
17	class admin_access {
18	$access_class = "admin"
19	file { "system-auth": }
20	}
21
22	# for server where people can connect with ssh ( git, svn )
23	class commiters_access {
24	$access_class = "commiters"
25	file { "system-auth": }
26	}
27	}