From 78a3e4b7ce4106394e9687ace9f910bd41242bf2 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 16 Sep 2019 13:57:24 +0200
Subject: [PATCH] slapd-ftmg.conf has credentials, lock down modes

---
 modules/roles/manifests/sso.pp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/roles/manifests/sso.pp b/modules/roles/manifests/sso.pp
index 6a119d4c5..4da64ebd2 100644
--- a/modules/roles/manifests/sso.pp
+++ b/modules/roles/manifests/sso.pp
@@ -36,6 +36,8 @@ class roles::sso {
   file { '/etc/ldap/slapd-ftmg.conf':
     content => template('roles/sso/slapd-ftmg.conf.erb'),
     notify  => Service['slapd'],
+    group   => 'openldap',
+    mode    => '0440',
   }
   file { '/etc/default/slapd':
     source => 'puppet:///modules/roles/sso/default-slapd',
-- 
2.20.1