Puppet Class: profile::idp::client::httpd

Defined in:
modules/profile/manifests/idp/client/httpd.pp

Summary

configure mod_auth_cas authentication

Overview

SPDX-License-Identifier: Apache-2.0

Parameters:

  • cookie_path (Stdlib::Unixpath) (defaults to: lookup('profile::idp::client::httpd::cookie_path')) —

    The location where cas stores information relating to authentication cookies issued

  • certificate_path (Stdlib::Unixpath) (defaults to: lookup('profile::idp::client::httpd::certificate_path')) —

    the SSL certificate path used for validation

  • apereo_cas (Apereo_cas::Urls) (defaults to: lookup('apereo_cas')) —

    hash holding the login and validation

  • apache_owner (String[1]) (defaults to: lookup('profile::idp::client::httpd::apache_owner')) —

    The user apache runs as

  • apache_group (String[1]) (defaults to: lookup('profile::idp::client::httpd::apache_group')) —

    The group apache runs as

  • sites (Hash) (defaults to: lookup('profile::idp::client::httpd::sites')) —

    A hash of sites to be used with profile::httpd::client::idp::site



9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
 
# File 'modules/profile/manifests/idp/client/httpd.pp', line 9

class profile::idp::client::httpd (
    Apereo_cas::Urls $apereo_cas       = lookup('apereo_cas'),
    Stdlib::Unixpath $certificate_path = lookup('profile::idp::client::httpd::certificate_path'),
    Stdlib::Unixpath $cookie_path      = lookup('profile::idp::client::httpd::cookie_path'),
    String[1]        $apache_owner     = lookup('profile::idp::client::httpd::apache_owner'),
    String[1]        $apache_group     = lookup('profile::idp::client::httpd::apache_group'),
    Hash             $sites            = lookup('profile::idp::client::httpd::sites')
) {
    ensure_packages(['libapache2-mod-auth-cas'])

    httpd::mod_conf{'auth_cas':}
    file{$cookie_path:
        ensure => directory,
        owner  => $apache_owner,
        group  => $apache_group,
    }
    $sites.each |Stdlib::Host $vhost, Hash $config| {
        profile::idp::client::httpd::site {$vhost:
            * => $config,
        }
    }
}