Skip to content
Snippets Groups Projects
Commit 356bd44b authored by Thomas Johansson's avatar Thomas Johansson
Browse files

Fixed all PDK related issues

parent fedad439
No related branches found
No related tags found
3 merge requests!37Test,!36Devel,!35Devel
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
class aes::aes_sw {
$examadm_user = examadm
$examadm_group = $examadm_user
......@@ -34,24 +39,29 @@ class aes::aes_sw {
group => $examadm_group,
}
# lint:ignore:140chars
file { "${examadm_home}/.ssh/authorized_keys":
ensure => file,
mode => '0600',
owner => $examadm_user,
group => $examadm_group,
# lint:ignore:strict_indent heredoc failing...
content => @(SSHPUBKEY),
command="/home/examadm/tal-cli/source/scripts/tal-export.py --format ics --lookback 90 --lookahead 180",no-pty,no-user-rc,no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJW4LP0av20r7lPXNgsftF9oaAXK41AvHyuHwybciZC/QBfTcmYif83563cTg0OzR/p+OSobiDM0odaaFYtP/8xbuVRz87X5bGYm2m8yHHqPxobHkT5g/faMkl9Fef+Al4EsT5tiaYMOhG2lj8XRYuwAb7qjoz3FFbs8TEPE7Sv+4BUCCH94taCuNYLXSxN1EXvw7VW6Ld5QXRFP53l2QUeTqE9oSii3BVrXlqqrLvNV/7nwdwyse4uhff4QrM9o4oc9FaQr8PLlPGxdlbSfIQJMVzHGpeDu0WLw+NqtLO1hsdlvQm7GrT/v8N7GJNKlsvhwnwUuMhTrB0yPMbbub1 klaar36@upp
command="/home/examadm/tal-cli/source/scripts/tal-export.py --written --format ics --lookback 90 --lookahead 180",no-pty,no-user-rc,no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZ8aEAXw0tRcYrk1aqldepuC6tmdUYZuM270QdDF79o tal written exams to ics
| SSHPUBKEY
# lint:endignore:strict_indent
}
# lint:endignore:140chars
file { '/etc/systemd/system/aes_login.service':
ensure => file,
owner => root,
group => root,
mode => '0644',
# lint:ignore:strict_indent heredoc failing...
content => @(LOGINSERVICE),
[Unit]
[Unit]
Description=AES Login server
After=network.target
......@@ -64,6 +74,7 @@ class aes::aes_sw {
[Install]
WantedBy=multi-user.target
| LOGINSERVICE
# lint:endignore:strict_indent
}
# todo: logrotate
......@@ -77,8 +88,9 @@ class aes::aes_sw {
owner => root,
group => root,
mode => '0644',
# lint:ignore:strict_indent heredoc failing...
content => @(MSSERVICE),
[Unit]
[Unit]
Description=AES Exam server
After=network.target
......@@ -91,6 +103,7 @@ class aes::aes_sw {
[Install]
WantedBy=multi-user.target
| MSSERVICE
# lint:endignore:strict_indent
}
file { '/etc/cron.daily/aes_ms':
......@@ -98,10 +111,12 @@ class aes::aes_sw {
owner => root,
group => root,
mode => '0700',
# lint:ignore:strict_indent heredoc failing...
content => @(MSCRON),
#!/bin/sh
#!/bin/sh
/usr/bin/systemctl restart aes_ms
| MSCRON
# lint:endignore:strict_indent
}
file { '/etc/cron.daily/aes_login':
......@@ -109,10 +124,12 @@ class aes::aes_sw {
owner => root,
group => root,
mode => '0700',
# lint:ignore:strict_indent heredoc failing...
content => @(MSCRON),
#!/bin/sh
#!/bin/sh
/usr/bin/systemctl restart aes_login
| MSCRON
# lint:endignore:strict_indent
}
# todo: logrotate
......
# # New keytab base64+pkcs7 encoded
# Optional[String] $keytab_base64 = undef, # Kerberos keytab file for HTTP/fqdn (ida-web)
# Optional[String] $keytab2_base64 = undef, # Kerberos keytab file for HTTP/fqdn (ida-web2)
#) {
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
# @param keytab_production_base64
# Describe keytab_production_base64
#
# @param keytab_devel_base64
# Describe keytab_devel_base64
#
class aes::auth (
# Comment out old keytab params but
# keep temporay for comparison
......
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
class aes::auth_keydb {
$keydb_user = auth_keydb
$keydb_group = $keydb_user
......
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
class aes::broker {
$broker_user = broker
$broker_group = $broker_user
......
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
class aes::examfiles {
include users::micis03
include users::jondy94
......
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
class aes {
include aes::examfiles
include aes::aes_sw
......@@ -107,8 +113,9 @@ class aes {
}
::server_firewall::rules_file { '45-permit_squid.rules':
# lint:ignore:strict_indent heredoc failing...
content => @(EOF),
service squid is tcp/3128
service squid is tcp/3128
service sclogin is tcp/23431
service aesmsi is tcp/23816
service aesmso is tcp/23817
......@@ -122,5 +129,6 @@ class aes {
accept service:aesbroker from class:liu-nets
end policy
|-EOF
# lint:endignore:strict_indent
}
}
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
class aes::latex {
package {
[
......
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
class aes::opendsa {
$opendsa_user = opendsa
$opendsa_group = $opendsa_user
......
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
class aes::squid_filter {
package { 'squid' :
ensure => 'present',
......
# @summary
# Describe what this class do!
#
# Detailed summary info if suitable
#
#
# @param credentials
# Describe credentials
#
class aes::tal_cli (
Optional[String] $credentials = undef
) {
......@@ -53,6 +62,7 @@ class aes::tal_cli (
owner => 'root',
group => 'root',
mode => '0700',
# lint:ignore:strict_indent heredoc failing...
content => @(END),
#!/bin/bash
if [ "$(hostname)" = "aes-devel.edu.liu.se" ]
......@@ -67,5 +77,6 @@ class aes::tal_cli (
sudo -u examadm /home/examadm/tal-cli/source/scripts/tal-remind.py --to ${TO} --computer-exam --send
fi
| END
# lint:endignore:strict_indent
}
}
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment