3 # This class installs and configures dacs for web auth
13 package { 'libapache2-mod-dacs':
17 file { '/var/log/dacs':
25 '/etc/dacs/federations',
26 '/etc/dacs/federations/debian.org/',
27 '/etc/dacs/federations/debian.org/DEBIAN',
28 '/etc/dacs/federations/debian.org/DEBIAN/acls',
29 '/etc/dacs/federations/debian.org/DEBIAN/groups',
30 '/etc/dacs/federations/debian.org/DEBIAN/groups/DACS'
36 require => Package['libapache2-mod-dacs'],
39 file { '/etc/dacs/federations/site.conf':
40 source => 'puppet:///modules/dacs/common/site.conf',
45 file { '/etc/dacs/federations/debian.org/DEBIAN/dacs.conf':
46 source => 'puppet:///modules/dacs/common/dacs.conf',
51 file { '/etc/dacs/federations/debian.org/DEBIAN/acls/revocations':
52 source => 'puppet:///modules/dacs/common/revocations',
57 file { '/etc/dacs/federations/debian.org/DEBIAN/groups/DACS/jurisdictions.grp':
58 source => 'puppet:///modules/dacs/common/jurisdictions.grp',
63 file { '/etc/dacs/federations/debian.org/DEBIAN/acls/acl-noauth.0':
64 source => [ "puppet:///modules/dacs/per-host/${::fqdn}/acl-noauth.0",
65 'puppet:///modules/dacs/common/acl-noauth.0' ],
69 notify => Exec['dacsacl']
71 file { '/etc/dacs/federations/debian.org/DEBIAN/acls/acl-private.0':
72 source => [ "puppet:///modules/dacs/per-host/${::fqdn}/acl-private.0",
73 'puppet:///modules/dacs/common/acl-private.0' ],
77 notify => Exec['dacsacl']
79 file { '/etc/dacs/federations/debian.org/federation_keyfile':
80 source => 'puppet:///modules/dacs/private/debian.org_federation_keyfile',
85 file { '/etc/dacs/federations/debian.org/DEBIAN/jurisdiction_keyfile':
86 source => 'puppet:///modules/dacs/private/DEBIAN_jurisdiction_keyfile',
93 command => 'dacsacl -sc /etc/dacs/federations/site.conf -c /etc/dacs/federations/debian.org/DEBIAN/dacs.conf -uj DEBIAN && chown root:www-data /etc/dacs/federations/debian.org/DEBIAN/acls/INDEX',