Version information
This version is compatible with:
- Puppet Enterprise 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x, 2018.1.x, 2017.3.x
- Puppet >= 5.0.0 < 7.0.0
- , , , , , , , , ,
Start using this module
Add this module to your Puppetfile:
mod 'ghoneycutt-pam', '3.7.0'Learn more about managing modules with a PuppetfileDocumentation
puppet-module-pam
Table of Contents
- Module Description - What the module does and why it is useful
- Setup - The basics of getting started with pam
- Usage - Configuration options and additional functionality
- Limitations - OS compatibility, etc.
- Development - Guide for contributing to the module
Module description
This module manages PAM including accesslogin and limits.conf with functionality to create limits fragments for use in other modules. There are examples for using this with VAS/QAS.
Setup
What pam affects
Manages the packages and files regarding PAM. These vary by platform though generally include things such as the following.
/etc/pam.conf/etc/pam.d/etc/security/access.conf/etc/security/limits.conf/etc/security/limits.d
Setup requirements
This module requires stdlib. When deployed by default it will require
nsswitch. See below for more information.
Optional
nsswitch
By default this module will include the nsswitch class with the
settings pam::manage_nsswitch. This module is meant to be used with
the Approved nsswitch
module.
SSSD
This module has been deployed in production along with
sgnl05/sssd. Please see
examples/hiera/sssd/RedHat-6.yaml file for an example with the
additional SSSD entries added via hiera.
Beginning with pam
Include the main pam class.
Specifying the allowed users
Example using an array
As an array where the origin for each is 'ALL'.
pam::allowed_users:
- root
- ops
- devs
This would create /etc/security/access.conf with the following content.
# This file is being maintained by Puppet.
# DO NOT EDIT
#
# allow only the groups listed
+:root:ALL
+:ops:ALL
+:devs:ALL
# default deny
-:ALL:ALL
Example using a hash
As a hash where the user/group can optionally specify the origin.
pam::allowed_users:
'username':
'username1':
- 'cron'
- 'tty0'
'username2': 'tty1'
This would create /etc/security/access.conf with the following content.
# This file is being maintained by Puppet.
# DO NOT EDIT
#
#allow only the groups listed
+:username:ALL
+:username1:cron tty0
+:username2:tty1
# default deny
-:ALL:ALL
Setting limits
Example:
pam::limits_fragments:
custom:
list:
- '* soft nofile 2048'
- '* hard nofile 8192'
- '* soft as 3145728'
- '* hard as 4194304'
- '* hard maxlogins 300'
- '* soft cpu 720'
- '* hard cpu 1440'
This would create /etc/security/limits.d/custom.conf with content
# This file is being maintained by Puppet.
# DO NOT EDIT
* soft nofile 2048
* hard nofile 8192
* soft as 3145728
* hard as 4194304
* hard maxlogins 300
* soft cpu 720
* hard cpu 1440
Specifying the content of a service
Manage PAM file for specific service.
Example:
You can specify a hash to manage the services in Hiera
pam::services:
'sudo':
content : 'auth required pam_unix2.so'
Usage
Minimal and normal usage.
include pam
Limitations
This module has been tested to work on the following systems with Puppet
versions 5 and 6 with the Ruby version associated with those releases.
Please see .travis.yml for a full matrix of supported versions. This
module aims to support the current and previous major Puppet versions.
- EL 6
- EL 7
- EL 8
- Debian 8
- Debian 9
- Debian 10
- Ubuntu 14.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 20.04 LTS
May work
These platforms have spec tests and have been verified in the past, though are not functionally tested and formally supported.
- EL 5
- Solaris 9
- Solaris 10
- Solaris 11
- Suse 9
- Suse 10
- Suse 11
- Suse 12
- Suse 15
- OpenSuSE 13.1
- Debian 7
- Ubuntu 12.04 LTS
Development
See CONTRIBUTING.md for information related to the development of this
module.
Reference
Table of Contents
Classes
pam: This module manages PAM.pam::accesslogin: Manage login access See PAM_ACCESS(8)pam::limits: Manage PAM limits.conf
Defined types
pam::limits::fragment: Places a fragment in $limits_d_dir directory One of the parameterssourceorlistmust be set.pam::service: Manage PAM file for specific service. Thepam::serviceresource is
Classes
pam
This module manages PAM.
Examples
Declaring the class
include pam
Parameters
The following parameters are available in the pam class.
allowed_users
Data type: Variant[Array, Hash, String]
String, Array or Hash of strings and/or arrays to configure users and origins in access.conf. The default allows the root user/group from origin 'ALL'.
Default value: 'root'
login_pam_access
Data type: Enum['absent', 'optional', 'required', 'requisite', 'sufficient']
Control module to be used for pam_access.so for login. Valid values are 'required', 'requisite', 'sufficient', 'optional' and 'absent'.
Default value: 'required'
sshd_pam_access
Data type: Enum['absent', 'optional', 'required', 'requisite', 'sufficient']
Control module to be used for pam_access.so for sshd. Valid values are 'required', 'requisite', 'sufficient', 'optional' and 'absent'.
Default value: 'required'
limits_fragments
Data type: Optional[Hash]
Hash of fragments to pass to pam::limits::fragments
Default value: undef
limits_fragments_hiera_merge
Data type: Boolean
Boolean to control merges of all found instances of pam::limits_fragments in Hiera. This is useful for specifying fragments at different levels of the hierarchy and having them all included in the catalog.
Default value: false
package_name
Data type: Optional[Variant[Array, String]]
String or Array of packages providing the pam functionality. If undef, parameter is set based on the OS version.
Default value: undef
pam_conf_file
Data type: Stdlib::Absolutepath
Absolute path to pam.conf.
Default value: '/etc/pam.conf'
services
Data type: Optional[Hash]
Hash of pam::service entries to be created.
Default value: undef
pam_d_login_oracle_options
Data type: Array
Allow array of extra lines at the bottom of pam.d/login for oracle systems on EL5.
Default value: []
pam_d_login_path
Data type: Stdlib::Absolutepath
Absolute path to PAM login file.
Default value: '/etc/pam.d/login'
pam_d_login_owner
Data type: String
Owner of $pam_d_login_path.
Default value: 'root'
pam_d_login_group
Data type: String
Group of $pam_d_login_path.
Default value: 'root'
pam_d_login_mode
Data type: Stdlib::Filemode
Mode of $pam_d_login_path.
Default value: '0644'
pam_d_login_template
Data type: Optional[String]
Content template of $pam_d_login_path. If undef, parameter is set based on the OS version.
Default value: undef
pam_d_sshd_path
Data type: Stdlib::Absolutepath
PAM sshd path.
Default value: '/etc/pam.d/sshd'
pam_d_sshd_owner
Data type: String
Owner of $pam_d_sshd_path.
Default value: 'root'
pam_d_sshd_group
Data type: String
Group of $pam_d_sshd_path.
Default value: 'root'
pam_d_sshd_mode
Data type: Stdlib::Filemode
Mode of $pam_d_sshd_path.
Default value: '0644'
pam_d_sshd_template
Data type: Optional[String]
Content template of $pam_d_sshd_path. If undef, parameter is set based on the OS version. For cases where a full customization of the sshd PAM configuration is required, set pam_d_sshd_template to use pam/sshd.custom.erb that is provided with this module. pam/sshd.custom.erb must be further configured with the parameters pam_sshd_auth_lines, pam_sshd_account_lines, pam_sshd_password_lines and pam_sshd_session_lines. Note that the pam_d_sshd_template parameter is a no-op on Solaris.
Default value: undef
pam_sshd_auth_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM sshd auth. This setting is required and only valid if pam_d_sshd_template is configured to use the pam/sshd.custom.erb template.
Default value: undef
pam_sshd_account_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM sshd account. This setting is required and only valid if pam_d_sshd_template is configured to use the pam/sshd.custom.erb template.
Default value: undef
pam_sshd_password_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM sshd password. This setting is required and only valid if pam_d_sshd_template is configured to use the pam/sshd.custom.erb template.
Default value: undef
pam_sshd_session_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM sshd session. This setting is required and only valid if pam_d_sshd_template is configured to use the pam/sshd.custom.erb template.
Default value: undef
pam_auth_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM auth. If undef, parameter is set based on the OS version.
Default value: undef
pam_account_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM account. If undef, parameter is set based on the OS version.
Default value: undef
pam_password_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM password. If undef, parameter is set based on the OS version.
Default value: undef
pam_session_lines
Data type: Optional[Array]
An ordered array of strings that define the content for PAM session. If undef, parameter is set based on the OS version.
Default value: undef
other_file
Data type: Stdlib::Absolutepath
Path to PAM other file. Used on Suse 9 and Solaris.
Default value: '/etc/pam.d/other'
common_auth_file
Data type: Stdlib::Absolutepath
Path to PAM common-auth file. Used on Debian/Ubuntu and Suse.
Default value: '/etc/pam.d/common-auth'
common_auth_pc_file
Data type: Stdlib::Absolutepath
Path to PAM common-auth-pc file. Used on Suse.
Default value: '/etc/pam.d/common-auth-pc'
common_account_file
Data type: Stdlib::Absolutepath
Path to PAM common-account file. Used on Suse.
Default value: '/etc/pam.d/common-account'
common_account_pc_file
Data type: Stdlib::Absolutepath
Path to PAM common-account-pc file. Used on Suse.
Default value: '/etc/pam.d/common-account-pc'
common_password_file
Data type: Stdlib::Absolutepath
Path to PAM common-password file. Used on Suse.
Default value: '/etc/pam.d/common-password'
common_password_pc_file
Data type: Stdlib::Absolutepath
Path to PAM common-password-pc file. Used on Suse.
Default value: '/etc/pam.d/common-password-pc'
common_session_file
Data type: Stdlib::Absolutepath
Path to PAM common-session file. Used on Suse.
Default value: '/etc/pam.d/common-session'
common_session_pc_file
Data type: Stdlib::Absolutepath
Path to PAM common-session-pc file. Used on Suse.
Default value: '/etc/pam.d/common-session-pc'
common_session_noninteractive_file
Data type: Stdlib::Absolutepath
Path to PAM common-session-noninteractive file, which is the same as common-session-pc used on Suse. Used on Ubuntu 12.04 LTS.
Default value: '/etc/pam.d/common-session-noninteractive'
system_auth_file
Data type: Stdlib::Absolutepath
Path to PAM system-auth file. Used on RedHat.
Default value: '/etc/pam.d/system-auth'
system_auth_ac_file
Data type: Stdlib::Absolutepath
Path to PAM system-auth-ac file. Used on RedHat.
Default value: '/etc/pam.d/system-auth-ac'
password_auth_file
Data type: Stdlib::Absolutepath
Path to PAM password-auth file. Used on RedHat.
Default value: '/etc/pam.d/password-auth'
password_auth_ac_file
Data type: Stdlib::Absolutepath
Path to PAM password-auth-ac file. Used on RedHat.
Default value: '/etc/pam.d/password-auth-ac'
pam_password_auth_lines
Data type: Optional[Array]
Array of lines used in content template of $password_auth_ac_file. If undef, parameter is set based on defaults for the detected platform.
Default value: undef
pam_password_account_lines
Data type: Optional[Array]
Array of lines used in content template of $password_auth_ac_file. If undef, parameter is set based on defaults for the detected platform.
Default value: undef
pam_password_password_lines
Data type: Optional[Array]
Array of lines used in content template of $password_auth_ac_file. If undef, parameter is set based on defaults for the detected platform.
Default value: undef
pam_password_session_lines
Data type: Optional[Array]
Array of lines used in content template of $password_auth_ac_file. If undef, parameter is set based on defaults for the detected platform.
Default value: undef
manage_nsswitch
Data type: Boolean
Boolean to manage the inclusion of the nsswitch class.
Default value: true
common_files
Data type: Array
Private, do not specify. Manage pam files where the entries match existing
template names. These common_files* parameters are used internally to
specify which files and names are needed. The data is coming out of Hiera
in data/os/.
Default value: []
common_files_create_links
Data type: Boolean
Private, do not specify. If true, then symlinks are created from the suffixed files to the originals without the suffix.
Default value: false
common_files_suffix
Data type: Optional[String]
Suffix added to the common_files entries for the filename.
Default value: undef
pam::accesslogin
Manage login access See PAM_ACCESS(8)
Examples
This class is included by the pam class for platforms which use it.
Parameters
The following parameters are available in the pam::accesslogin class.
access_conf_path
Data type: Stdlib::Absolutepath
Path to access.conf.
Default value: '/etc/security/access.conf'
access_conf_owner
Data type: String
Owner of access.conf.
Default value: 'root'
access_conf_group
Data type: String
Group of access.conf.
Default value: 'root'
access_conf_mode
Data type: Stdlib::Filemode
Mode of access.conf.
Default value: '0644'
access_conf_template
Data type: String
Content template of access.conf.
Default value: 'pam/access.conf.erb'
allowed_users
Data type: Variant[Array, Hash, String]
String, Array or Hash of strings and/or arrays to configure users and origins in access.conf. The default allows the root user/group from origin 'ALL'.
Default value: $pam::allowed_users
pam::limits
Manage PAM limits.conf
Examples
This class is included by the pam class for platforms which use it.
Parameters
The following parameters are available in the pam::limits class.
config_file
Data type: Stdlib::Absolutepath
Path to limits.conf.
Default value: '/etc/security/limits.conf'
config_file_mode
Data type: Stdlib::Filemode
Mode for config_file.
Default value: '0640'
config_file_lines
Data type: Optional[Array]
Ordered array of limits that should be placed into limits.conf. Useful for Suse 10 which does not use limits.d.
Default value: undef
config_file_source
Data type: Optional[String]
String with source path to a limits.conf
Default value: undef
limits_d_dir
Data type: Stdlib::Absolutepath
Path to limits.d directory.
Default value: '/etc/security/limits.d'
limits_d_dir_mode
Data type: Stdlib::Filemode
Mode for limits_d_dir.
Default value: '0750'
purge_limits_d_dir
Data type: Boolean
Boolean to purge the limits.d directory.
Default value: false
Defined types
pam::limits::fragment
Places a fragment in $limits_d_dir directory One of the parameters source
or list must be set.
Examples
pam::limits::fragment { 'nproc':
source => 'puppet:///modules/pam/limits.nproc',
}
Parameters
The following parameters are available in the pam::limits::fragment defined type.
ensure
Data type: Enum['file', 'present', 'absent']
Ensure attribute for the fragment file.
Default value: 'file'
source
Data type: Optional[String]
Path to the fragment file, such as 'puppet:///modules/pam/limits.nproc'
Default value: undef
list
Data type: Optional[Array]
Array of lines to add to the fragment file.
Default value: undef
pam::service
reversible, so that any service that Puppet has locked using PAM can be unlocked by setting the resource ensure to absent and waiting for the next puppet run.
Examples
pam::service { 'sudo':
content => 'auth required pam_unix2.so',
}
Parameters
The following parameters are available in the pam::service defined type.
ensure
Data type: Enum['present', 'absent']
Specifies if a PAM service file should (present) or should not (absent)
exist. The default is set to 'present'
Default value: 'present'
pam_config_dir
Data type: Stdlib::Absolutepath
Path to PAM files.
Default value: '/etc/pam.d'
content
Data type: Optional[String]
Content of the PAM file for the service. The content and lines
parameters are mutually exclusive. Not setting either of these parameters
will result in an empty service definition file.
Default value: undef
lines
Data type: Optional[Array]
Provides content for the PAM service file as an array of lines. The
content and lines parameters are mutually exclusive. Not setting either
of these parameters will result in an empty service definition file.
Default value: undef
Changelog
v3.7.0 (2020-11-17)
Merged pull requests:
v3.6.0 (2020-11-09)
Implemented enhancements:
- Support EL8 #231 (ghoneycutt)
Closed issues:
- Restrict Root user from switching users without password prompt #222
- pam_d_login_oracle_options not available for el7 #197
Merged pull requests:
- Fix style issues #228 (ghoneycutt)
- Use correct templates for sshd and login in Debian 10 #220 (thechristschn)
v3.5.0 (2020-03-07)
Closed issues:
- Support for Debian 10 #218
Merged pull requests:
- Add support for Debian 10 #217 (thechristschn)
v2.35.0 (2019-11-25)
Closed issues:
- RHEL8 support #211
v3.4.0 (2019-11-24)
Closed issues:
- access.conf manage #216
Merged pull requests:
v3.3.1 (2019-08-27)
Closed issues:
- Add support for SLES 15 #210
Merged pull requests:
v3.3.0 (2019-05-23)
Merged pull requests:
- GH-210 Add support for SLES 15 #212 (ph84172)
- Simplify gemfile #209 (ghoneycutt)
- Update json requirement from ~> 2.1.0 to ~> 2.2.0 #208 (dependabot-preview[bot])
- Update json_pure requirement from ~> 2.1.0 to ~> 2.2.0 #207 (dependabot-preview[bot])
v3.2.0 (2019-01-15)
Implemented enhancements:
- Debian9 #206 (ghoneycutt)
Closed issues:
- Add support for Ubuntu 18.04 #195
- allowed_users ordering #184
- New Use-Case: Preserving file changes from authconfig #183
- CentOS 7: password-auth-ac changed incorrectly #166
Merged pull requests:
v3.1.0 (2019-01-15)
Closed issues:
- REPEAT: /etc/pam.d/passwd for RHEL 7 #182
- Documentation: How do I use pam::limits::fragments ? #177
- Puppet5 and 6 compatibility #168
- please use the stdlib validate_legacy function #165
- Allow configuration of "listsep" #163
- Consistent implementation #133
- pam::service includes pam #120
- Symlink target used for EL systems #117
- make the inclusion of nsswitch optional #89
- (#100) spec tests should check contents of pam files #35
Merged pull requests:
- Ubuntu1804 #205 (ghoneycutt)
- Validate shell scripts #204 (ghoneycutt)
- Add Vagrant support #203 (ghoneycutt)
- Test with latest (2.1.0) release of trlinkin/nsswitch #202 (ghoneycutt)
- Update json requirement from ~> 1.8.3 to ~> 2.1.0 #201 (dependabot-preview[bot])
- Update rake requirement from ~> 10.0 to ~> 12.3 #200 (dependabot-preview[bot])
- Update json_pure requirement from ~> 1.8.3 to ~> 2.1.0 #199 (dependabot-preview[bot])
v3.0.0 (2018-11-09)
Merged pull requests:
- Add acceptance tests #191 (treydock)
- Deprecate create_resources() #190 (ghoneycutt)
- Document module #189 (ghoneycutt)
- V3 #179 (ghoneycutt)
- use new readme format #174 (Phil-Friderici)
- Switch to trlinkin/nsswitch for nsswitch dependency #173 (treydock)
- Refactors #172 (Phil-Friderici)
- Replacing lsb* facts for SuSE distros #171 (v4ld3r5)
- Use Hiera 5 module data #170 (treydock)
- Remove VAS logic and create examples that show old behavior #169 (treydock)
2.34.0 (2018-09-18)
v2.34.0 (2018-09-18)
Closed issues:
- Add support for Debian 9 #187
- /etc/pam.d/passwd for RHEL 7 or is there a way to include a custom file path ? #180
- By default users are not restricted per ssh. #157
- [Feature] - Ability to add options for pam_access lines added #156
- pam::allowed_users removes user from multiple files, and only adds back to access_conf #154
- Unwanted 'deny all' in allowed_users #131
Merged pull requests:
- Add example SSSD integration using hiera #143 (jeffmccune)
v2.33.0 (2017-04-20)
Merged pull requests:
v2.32.0 (2017-04-07)
Merged pull requests:
- Puppet v4.10 #159 (ghoneycutt)
v2.31.0 (2017-02-27)
Merged pull requests:
- Add support for VAS 4 on Ubuntu 16.04 #153 (ghoneycutt)
- Fix dependencies #150 (ghoneycutt)
- Manage nsswitch #149 (ghoneycutt)
v2.30.0 (2016-10-21)
v2.29.1 (2016-10-12)
Merged pull requests:
v2.29.0 (2016-10-04)
Closed issues:
- Basic usage #146
Merged pull requests:
- Prep v2.29.0 #148 (ghoneycutt)
- Add support for Debian 7 #147 (mandos)
v2.28.0 (2016-08-31)
Closed issues:
- dash before the session for pam.d/login template #145
Merged pull requests:
- Use newer puppetlabs_spec_helper which does strict variable checking #144 (ghoneycutt)
v2.27.0 (2016-08-29)
Merged pull requests:
- Add template for performing custom sshd pam config #141 (boandersson)
v2.26.0 (2016-08-12)
Merged pull requests:
- Add support for Ruby 2.3.1 #140 (ghoneycutt)
v2.25.0 (2016-07-21)
Merged pull requests:
- Added more general support for Debian 8 #139 (ghoneycutt)
- Fix travis #138 (ghoneycutt)
v2.24.0 (2016-06-15)
Merged pull requests:
- Add Ubuntu 16.04 LTS Support #136 (ghoneycutt)
v2.23.0 (2016-06-14)
Merged pull requests:
- Improve testing #135 (ghoneycutt)
v2.22.0 (2016-04-08)
Merged pull requests:
- Satisfy strict variables test #130 (Phil-Friderici)
- El6 password auth support #129 (ghoneycutt)
v2.21.0 (2016-01-12)
v2.20.0 (2015-12-16)
Merged pull requests:
- Future parser and v4 #124 (ghoneycutt)
v2.19.1 (2015-06-09)
Closed issues:
- ghoneycutt-nsswitch dependency #112
Merged pull requests:
- Suse12: Add systemd and pam_envd to common session #111 (anders-larsson)
v2.19.0 (2015-04-15)
Merged pull requests:
v2.18.0 (2015-04-07)
Merged pull requests:
- Make pam::service resources reversible #103 (ghoneycutt)
v2.17.0 (2015-04-02)
Merged pull requests:
- Add hiera_hash support for limits fragments #106 (jwennerberg)
v2.16.0 (2015-03-31)
Closed issues:
- release v1.0.0 #105
Merged pull requests:
- Add ensure attribute for limits fragment #109 (jwennerberg)
- Update testing and metadata #108 (ghoneycutt)
- Refactored spec tests #104 (ghost)
v2.15.0 (2015-02-05)
Merged pull requests:
- Trusty #99 (ghoneycutt)
v2.14.0 (2015-02-02)
Merged pull requests:
v2.13.0 (2015-01-28)
Merged pull requests:
- Allow override pam access control flags #93 (ghoneycutt)
v2.12.0 (2015-01-28)
Merged pull requests:
- Replace lsbmajdistrelease fact check with operatingsystemmajrelease for ... #92 (ghoneycutt)
v2.11.0 (2015-01-28)
Merged pull requests:
- Order hash for access.conf, useful for Ruby 1.8.7 #91 (ghoneycutt)
- Add ability to optionally purge limits_d #90 (ghoneycutt)
- Epic change in array layout reduces excessive line length that hurts my editor #88 (Aethylred)
v2.10.0 (2014-12-08)
Merged pull requests:
- Support newer software #87 (ghoneycutt)
- El7 support #85 (ghoneycutt)
v2.9.0-el7 (2014-10-08)
v2.9.0 (2014-09-30)
Merged pull requests:
v2.8.0 (2014-09-30)
Merged pull requests:
v2.7.1-el7 (2014-09-10)
v2.7.1 (2014-08-12)
Closed issues:
- lsbdistmajrelease missing error on CentOS #58
Merged pull requests:
- Fix common::mkdir_p usage #69 (ghoneycutt)
- Do not include the common class as not required #68 (treydock)
v2.7.0 (2014-07-19)
Merged pull requests:
- Access conf support hashes #64 (ghoneycutt)
v2.6.1 (2014-06-01)
Merged pull requests:
- Fix variable access method in template. #61 (ghoneycutt)
v2.6.0 (2014-05-23)
Merged pull requests:
- Add ability to specify file modes in pam::limits #59 (ghoneycutt)
v2.5.0 (2014-05-12)
Closed issues:
- ruby 1.9.3 is not supported #24
Merged pull requests:
- Add Solaris 9 support #57 (ghoneycutt)
v2.4.5 (2014-05-02)
Merged pull requests:
- Support Ruby v1.9.3 and v2.0.0 #56 (ghoneycutt)
v2.4.4 (2014-05-02)
Merged pull requests:
- Manage limits.d directory #52 (jwennerberg)
v2.4.3 (2014-02-05)
Merged pull requests:
- Improve spec tests - ensure require attribute is tested #51 (ghoneycutt)
- Fixed refrence to pam-package #50 (philippvh)
v2.4.2 (2014-02-01)
Merged pull requests:
- Support Puppet v3.4 #49 (ghoneycutt)
v2.4.1 (2014-01-28)
Merged pull requests:
- Prep for 2 4 1 #48 (ghoneycutt)
- Fixed: deprecated variables access in templates #47 (Phil-Friderici)
- Travis #46 (ghoneycutt)
- Support rspec-puppet v1.0.0 #45 (ghoneycutt)
v2.4.0 (2013-12-10)
Merged pull requests:
- 237 suse support #44 (ghoneycutt)
- Include_class is deprecated. Use contain_class instead. #42 (tbartelmess)
- SuSE/VAS support #41 (ghoneycutt)
v2.3.0 (2013-12-04)
Merged pull requests:
- WIP #40 (ghoneycutt)
- Add option to enable default pam config for VAS #37 (jwennerberg)
v2.2.0 (2013-11-07)
Closed issues:
- spec tests for pam module #17
Merged pull requests:
- Release v2 2 0 #39 (ghoneycutt)
- Add nonfile fragments #38 (ghoneycutt)
- Added rspec content tests, removed tab in sshd el6 template #36 (kentjohansson)
- Add support for Suse 9 #34 (ghoneycutt)
- Add support for Solaris 11 #33 (ghoneycutt)
- Add support for Suse 10 #30 (kentjohansson)
- Add ubuntu 1204lts #29 (ghoneycutt)
- Add support for Suse 11 #27 (jwennerberg)
* This Changelog was automatically generated by github_changelog_generator
Dependencies
- trlinkin/nsswitch (>= 2.1.0 < 3.0.0)
- puppetlabs/stdlib (>= 4.25.0 < 7.0.0)
Copyright (C) 2010-2020 Garrett Honeycutt <code@garretthoneycutt.com>
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.