modules/krb/manifests/init.pp

   1 class krb {
   2     package { "heimdal-clients": ensure => installed }
   3
   4     file {
   5         "/etc/krb5.conf":
   6             content => template("krb/krb5.conf.erb"),
   7             require => Package["heimdal-clients"],
   8             ;
   9     }
  10
  11     case $hostname {
  12         byrd,schuetz: {
  13             @ferm::rule { "dsa-krb-kdc":
  14                 domain          => "(ip ip6)",
  15                 description  => "kerberos KDC",
  16                 rule         => "&TCP_UDP_SERVICE(kerberos)"
  17             }
  18         }
  19     }
  20
  21     case $hostname {
  22         byrd: {
  23             @ferm::rule { "dsa-krb-ipropd":
  24                 domain       => "ip",
  25                 description  => "kerberos ipropd",
  26                 rule         => "&SERVICE_RANGE(tcp, iprop, 206.12.19.119)",
  27             }
  28             @ferm::rule { "dsa-krb-ipropd-v6":
  29                 domain       => 'ip6',
  30                 description  => "kerberos ipropd (IPv6)",
  31                 rule         => "&SERVICE_RANGE(tcp, iprop, 2607:f8f0:610:4000:216:36ff:fe40:380a)",
  32             }
  33             @ferm::rule { "dsa-krb-kpasswdd":
  34                 domain          => "(ip ip6)",
  35                 description  => "kerberos KDC",
  36                 rule         => "&SERVICE(udp, kpasswd)",
  37             }
  38             @ferm::rule { "dsa-krb-kadmind":
  39                 domain       => "ip",
  40                 description  => "kerberos kadmind access from draghi",
  41                 rule         => "&SERVICE_RANGE(tcp, kerberos-adm, 82.195.75.106)",
  42             }
  43             @ferm::rule { "dsa-krb-kadmind-v6":
  44                 domain       => "ip6",
  45                 description  => "kerberos kadmind access from draghi",
  46                 rule         => "&SERVICE_RANGE(tcp, kerberos-adm, 2001:41b8:202:deb:216:36ff:fe40:3906)",
  47             }
  48         }
  49     }
  50
  51 }
  52 # vim:set et:
  53 # vim:set sts=4 ts=4:
  54 # vim:set shiftwidth=4: