From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 16 Sep 2019 11:57:24 +0000 (+0200)
Subject: slapd-ftmg.conf has credentials, lock down modes
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=78a3e4b7ce4106394e9687ace9f910bd41242bf2;p=mirror%2Fdsa-puppet.git

slapd-ftmg.conf has credentials, lock down modes
---

diff --git a/modules/roles/manifests/sso.pp b/modules/roles/manifests/sso.pp
index 6a119d4c5..4da64ebd2 100644
--- a/modules/roles/manifests/sso.pp
+++ b/modules/roles/manifests/sso.pp
@@ -36,6 +36,8 @@ class roles::sso {
   file { '/etc/ldap/slapd-ftmg.conf':
     content => template('roles/sso/slapd-ftmg.conf.erb'),
     notify  => Service['slapd'],
+    group   => 'openldap',
+    mode    => '0440',
   }
   file { '/etc/default/slapd':
     source => 'puppet:///modules/roles/sso/default-slapd',