Hello, I'm trying this group to get help with the syntax for
augeasproviders_pam and the position paramter.
Yes, I did try google (for several days now), and the Puppet IRC channel
twice (which was pretty much as typing to /dev/null)
I cannot find out how to write a bit more complex xpath expressions for
augeasproviders_pam.
Hopefully someone with some knowledge of augeasproviders_pam can help.
The case is that need to add a pam entry to system-auth and place it before
one or more other entries.
Placing the new 'pam_xxx' before one spesific entry is easy, and google
helps a lot on how to do this:
pam { 'Add pam_xxxx to system-auth':
ensure => positioned,
service => 'system-auth',
type => 'auth',
control => 'requisite',
module => 'pam_xxxx.so',
arguments => ['arg1=value1','arg2=value2'],
position => 'before *[type="auth" and module="pam_unix.so"]',
}
But how would one go about when what you really want is before module
pam_unix.so and.. if it exist this other module also.. and if there was a
third optional module.. then also add it before that...
The xpath syntax for that is not clear to me, does anyone know if this is
possible?
Something like this doesn't work:
position => 'before *[type="auth" and module="pam_unix.so" and
module="secondoptionalmodule" and module="thirdoptionalmodule"]',
Neither does this:
position => 'before *[type="auth" and module="pam_unix.so" and *
[module="secondoptionalmodule" and module="thirdoptionalmodule"]]',
So the question is, is it possible to do something like this:
In section Auth
Put new entry above modules:
pam_unix
pam_optional_1
pam_optional_2
or is my only option to always put it after pam_env.so.. resulting that it
may be put to high up in the pam file?
Regards
T-Bear
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/c69d9c8d-4945-4c20-9a90-20adb6f83e5e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
