3 # This class installs and configures dacs for web auth
13 package { 'libapache2-mod-dacs':
24 file { '/var/log/dacs':
30 '/etc/dacs/federations',
31 '/etc/dacs/federations/debian.org/',
32 '/etc/dacs/federations/debian.org/DEBIAN',
33 '/etc/dacs/federations/debian.org/DEBIAN/acls',
34 '/etc/dacs/federations/debian.org/DEBIAN/groups',
35 '/etc/dacs/federations/debian.org/DEBIAN/groups/DACS'
39 require => Package['libapache2-mod-dacs'],
42 file { '/etc/dacs/federations/site.conf':
43 source => 'puppet:///modules/dacs/common/site.conf',
45 file { '/etc/dacs/federations/debian.org/DEBIAN/dacs.conf':
46 source => [ "puppet:///modules/dacs/per-host/${::fqdn}/dacs.conf",
47 'puppet:///modules/dacs/common/dacs.conf', ],
49 file { '/etc/dacs/federations/debian.org/DEBIAN/acls/revocations':
50 source => 'puppet:///modules/dacs/common/revocations',
52 file { '/etc/dacs/federations/debian.org/DEBIAN/groups/DACS/jurisdictions.grp':
53 source => 'puppet:///modules/dacs/common/jurisdictions.grp',
55 file { '/etc/dacs/federations/debian.org/DEBIAN/acls/acl-noauth.0':
56 source => [ "puppet:///modules/dacs/per-host/${::fqdn}/acl-noauth.0",
57 'puppet:///modules/dacs/common/acl-noauth.0' ],
58 notify => Exec['dacsacl']
60 file { '/etc/dacs/federations/debian.org/DEBIAN/acls/acl-private.0':
61 source => [ "puppet:///modules/dacs/per-host/${::fqdn}/acl-private.0",
62 'puppet:///modules/dacs/common/acl-private.0' ],
63 notify => Exec['dacsacl']
65 file { '/etc/dacs/federations/debian.org/federation_keyfile':
66 source => 'puppet:///modules/dacs/private/debian.org_federation_keyfile',
68 file { '/etc/dacs/federations/debian.org/DEBIAN/jurisdiction_keyfile':
69 source => 'puppet:///modules/dacs/private/DEBIAN_jurisdiction_keyfile',
73 command => 'dacsacl -sc /etc/dacs/federations/site.conf -c /etc/dacs/federations/debian.org/DEBIAN/dacs.conf -uj DEBIAN && chown root:www-data /etc/dacs/federations/debian.org/DEBIAN/acls/INDEX',