Puppet push LDAP authentiation

Continue with my previous post of How to set up LDAP authentication in CentOS, I have made the Puppet be able to push it in my lab. Here is how it looks:

The manifest file and files can be downloaded from here.

class sys_ldap {

package { ‘openldap’:
ensure => installed,
}

package { ‘openldap-clients’:
ensure => installed,
require => Package[‘openldap’]
}

package { ‘sssd’:
ensure => installed,
}

file { ‘/etc/openldap/ldap.conf’:
ensure => file,
source => ‘puppet:///sys_ldap/ldap.conf’,
require => Package[‘openldap-clients’],
}

file { ‘/etc/openldap/certs/ldap-pub.pem’:
ensure => file,
source => ‘puppet:///sys_ldap/ldap-pub.pem’,
require => Package[‘openldap-clients’],
}

file { ‘/etc/sssd/sssd.conf’:
ensure => file,
source => ‘puppet:///sys_ldap/sssd.conf’,
mode => 600,
require => Package[‘sssd’],
}

exec { ‘/usr/sbin/authconfig –enablesssd –enablesssdauth –enableldap –enableldapauth –enablemkhomedir –ldapserver=ldaps://ldap.mylab.local –ldapbasedn=dc=mylab,dc=local –enablelocauthorize –enableldaptls –update’:
require => [ File[‘/etc/openldap/ldap.conf’], File[‘/etc/openldap/certs/ldap-pub.pem’], File[‘/etc/sssd/sssd.conf’], ],
}

}