aboutsummaryrefslogtreecommitdiffstats
path: root/manifests/profile/base/keystone.pp
diff options
context:
space:
mode:
authorJacob Liberman <jliberma@redhat.com>2017-06-01 09:33:21 -0500
committerJacob Liberman <jacobliberman@gmail.com>2017-06-01 21:10:38 +0000
commit90704a6017f7c539e3c1fed038ed247763619380 (patch)
tree105990fc90ec161c8d11a0fce3e6112df1c972fc /manifests/profile/base/keystone.pp
parent39fcf37572f5c90aaf6fbf2c644c4433adcb9577 (diff)
Add conditional for setting authlogin_nsswitch_use_ldap selboolean
If selinux is enabled the authlogin_nsswitch_use_ldap Boolean must be enabled. This setting allows LDAP communications to the confined LDAP/server port. This change includes a conditional for enabling this Boolean only when selinux is in use. Change-Id: If985f2434d28fcd33198929bf61f2a3a82e601fe Closes-Bug: #1695002
Diffstat (limited to 'manifests/profile/base/keystone.pp')
-rw-r--r--manifests/profile/base/keystone.pp6
1 files changed, 6 insertions, 0 deletions
diff --git a/manifests/profile/base/keystone.pp b/manifests/profile/base/keystone.pp
index 72a7bc9..c7eea14 100644
--- a/manifests/profile/base/keystone.pp
+++ b/manifests/profile/base/keystone.pp
@@ -222,6 +222,12 @@ class tripleo::profile::base::keystone (
if $ldap_backend_enable {
validate_hash($ldap_backends_config)
+ if !str2bool($::selinux) {
+ selboolean { 'authlogin_nsswitch_use_ldap':
+ value => on,
+ persistent => true,
+ }
+ }
create_resources('::keystone::ldap_backend', $ldap_backends_config, {
create_domain_entry => $manage_domain,
})