On Fri, Oct 15, 2010 at 07:06:52AM -0700, walexey wrote:
> i can't imaging something better than add
>
> if tagged(winbind) {
> $winbind = 'winbind'
> } else {
> $winbind = ''
> }
> in ldap-client class
>
> and add
> passwd: files <%= winbind %> ldap
> to nsswithch.conf template.
>
> can you show me the right way?
>
There is more than one way to do this.
A simple way would be to use a variable to indicate whether you want
winbind integration. Then anything that needs to know whether winbind
is active can just check the variable - including the piece of code
where you decide whether nor not to include the winbind class/module.
The canonical Puppet way of dealing with it is to write a custom
resource to manage nsswitch.conf. How good are your ruby skills?
I have found a way to abuse virtual define-based resources so that you
can effectively write your own custom resources in the Puppet DSL,
rather than using Ruby, which I consider to be overkill for a case as
simple as this. I will write it up when I have a moment, this weekend.
Meanwhile, if you aren't great at Ruby, I suggest the simple method I
described first.
node "host.on.which.I.want.winbind.active" {
$winbind_integration = true
include site::role::server
}
class site::role::server {
if $winbind_integration {
include samba::winbind
}
}
---- nsswitch.conf.erb ----
passwd: files <% if winbind_integration == true %>winbind<% end %> ldap
---- nsswitch.conf.erb ----
It's not the most elegant solution (not the last bit, anyway) but it
works and if you can't trust yourself to set the right variables in the
correct hosts, who can you trust?
--
Bruce
Bitterly it mathinketh me, that I spent mine wholle lyf in the lists
against the ignorant. -- Roger Bacon, "Doctor Mirabilis"
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
