X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fportforwarder%2Fmanifests%2Finit.pp;h=9cb62f60724bf3d45f2efc176744b3582896832f;hb=60500e34550eaada1c4dd3315566e90cac8fd702;hp=2cc458245e079c3c0a11867a1bb41be4d412e1ab;hpb=b2492d4d920d65bbecb85139c16789077733d102;p=mirror%2Fdsa-puppet.git

diff --git a/modules/portforwarder/manifests/init.pp b/modules/portforwarder/manifests/init.pp
index 2cc458245..9cb62f607 100644
--- a/modules/portforwarder/manifests/init.pp
+++ b/modules/portforwarder/manifests/init.pp
@@ -1,21 +1,33 @@
 class portforwarder {
 	# do not depend on xinetd, yet.  it might uninstall other inetds
 	# for now this will have to be done manually
-	file { '/etc/ssh/userkeys/portforwarder':
-		content => template('portforwarder/authorized_keys.erb'),
-	}
-	file { '/etc/xinetd.d':
-		ensure  => directory,
-		owner   => root,
-		group   => root,
-		mode    => '0755',
-	}
-	file { '/etc/xinetd.d/dsa-portforwader':
-		content => template('portforwarder/xinetd.erb'),
-		notify  => Exec['service xinetd reload']
-	}
 
-	exec { 'service xinetd reload':
-		refreshonly => true,
+	if $::portforwarder_user_exists {
+		ssh::keygen {'portforwarder': }
+
+		file { '/etc/ssh/userkeys/portforwarder':
+			content => template('portforwarder/authorized_keys.erb'),
+		}
+		file { '/etc/xinetd.d':
+			ensure  => directory,
+			owner   => root,
+			group   => root,
+			mode    => '0755',
+		}
+		file { '/etc/xinetd.d/dsa-portforwader':
+			content => template('portforwarder/xinetd.erb'),
+			notify  => Exec['service xinetd reload']
+		}
+
+		exec { 'service xinetd reload':
+			refreshonly => true,
+		}
+	} else {
+		file { [
+			'/etc/ssh/userkeys/portforwarder',
+			'/etc/xinetd.d/dsa-portforwader',
+			]:
+			ensure => 'absent',
+		}
 	}
 }