modules/portforwarder/manifests/init.pp

   1 class portforwarder {
   2         # do not depend on xinetd, yet.  it might uninstall other inetds
   3         # for now this will have to be done manually
   4
   5         if $::portforwarder_user_exists {
   6                 ssh::keygen {'portforwarder': }
   7
   8                 file { '/etc/ssh/userkeys/portforwarder':
   9                         content => template('portforwarder/authorized_keys.erb'),
  10                 }
  11                 file { '/etc/xinetd.d':
  12                         ensure  => directory,
  13                         owner   => root,
  14                         group   => root,
  15                         mode    => '0755',
  16                 }
  17                 file { '/etc/xinetd.d/dsa-portforwader':
  18                         content => template('portforwarder/xinetd.erb'),
  19                         notify  => Exec['service xinetd reload']
  20                 }
  21
  22                 exec { 'service xinetd reload':
  23                         refreshonly => true,
  24                 }
  25         } else {
  26                 file { [
  27                         '/etc/ssh/userkeys/portforwarder',
  28                         '/etc/xinetd.d/dsa-portforwader',
  29                         ]:
  30                         ensure => 'absent',
  31                 }
  32         }
  33 }