puppet 5.0.0 → 6.0.0

data/lib/puppet/type/k5login.rb

@@ -1,88 +0,0 @@
-# Plug-in type for handling k5login files
-require 'puppet/util'
-
-Puppet::Type.newtype(:k5login) do
-  @doc = "Manage the `.k5login` file for a user.  Specify the full path to
-    the `.k5login` file as the name, and an array of principals as the
-    `principals` attribute."
-
-  ensurable
-
-  # Principals that should exist in the file
-  newproperty(:principals, :array_matching => :all) do
-    desc "The principals present in the `.k5login` file. This should be specified as an array."
-  end
-
-  # The path/name of the k5login file
-  newparam(:path) do
-    isnamevar
-    desc "The path to the `.k5login` file to manage.  Must be fully qualified."
-
-    validate do |value|
-      unless absolute_path?(value)
-        raise Puppet::Error, _("File paths must be fully qualified.")
-      end
-    end
-  end
-
-  # To manage the mode of the file
-  newproperty(:mode) do
-    desc "The desired permissions mode of the `.k5login` file. Defaults to `644`."
-    defaultto { "644" }
-  end
-
-  provide(:k5login) do
-    desc "The k5login provider is the only provider for the k5login
-      type."
-
-    # Does this file exist?
-    def exists?
-      Puppet::FileSystem.exist?(@resource[:name])
-    end
-
-    # create the file
-    def create
-      write(@resource.should(:principals))
-      should_mode = @resource.should(:mode)
-      unless self.mode == should_mode
-        self.mode = should_mode
-      end
-    end
-
-    # remove the file
-    def destroy
-      Puppet::FileSystem.unlink(@resource[:name])
-    end
-
-    # Return the principals
-    def principals
-      if Puppet::FileSystem.exist?(@resource[:name])
-        File.readlines(@resource[:name]).collect { |line| line.chomp }
-      else
-        :absent
-      end
-    end
-
-    # Write the principals out to the k5login file
-    def principals=(value)
-      write(value)
-    end
-
-    # Return the mode as an octal string, not as an integer
-    def mode
-      "%o" % (Puppet::FileSystem.stat(@resource[:name]).mode & 007777)
-    end
-
-    # Set the file mode, converting from a string to an integer.
-    def mode=(value)
-      File.chmod(Integer("0#{value}"), @resource[:name])
-    end
-
-    private
-    def write(value)
-      Puppet::Util.replace_file(@resource[:name], 0644) do |f|
-        f.puts value
-      end
-    end
-  end
-end

data/lib/puppet/type/macauthorization.rb

@@ -1,167 +0,0 @@
-Puppet::Type.newtype(:macauthorization) do
-
-  @doc = "Manage the Mac OS X authorization database. See the
-    [Apple developer site](https://developer.apple.com/documentation/Security/Conceptual/Security_Overview/Security_Services/chapter_4_section_5.html)
-    for more information.
-
-    Note that authorization store directives with hyphens in their names have
-    been renamed to use underscores, as Puppet does not react well to hyphens
-    in identifiers.
-
-    **Autorequires:** If Puppet is managing the `/etc/authorization` file, each
-    macauthorization resource will autorequire it."
-
-  ensurable
-
-  autorequire(:file) do
-    ["/etc/authorization"]
-  end
-
-  def munge_boolean(value)
-    case value
-    when true, "true", :true
-      :true
-    when false, "false", :false
-      :false
-    else
-      fail("munge_boolean only takes booleans")
-    end
-  end
-
-  def munge_integer(value)
-      Integer(value)
-  rescue ArgumentError
-      fail _("munge_integer only takes integers")
-  end
-
-  newparam(:name) do
-    desc "The name of the right or rule to be managed.
-    Corresponds to `key` in Authorization Services. The key is the name
-    of a rule. A key uses the same naming conventions as a right. The
-    Security Server uses a rule's key to match the rule with a right.
-    Wildcard keys end with a '.'. The generic rule has an empty key value.
-    Any rights that do not match a specific rule use the generic rule."
-
-    isnamevar
-  end
-
-  newproperty(:auth_type) do
-    desc "Type --- this can be a `right` or a `rule`. The `comment` type has
-    not yet been implemented."
-
-    newvalue(:right)
-    newvalue(:rule)
-    # newvalue(:comment)  # not yet implemented.
-  end
-
-  newproperty(:allow_root, :boolean => true) do
-    desc "Corresponds to `allow-root` in the authorization store. Specifies
-    whether a right should be allowed automatically if the requesting process
-    is running with `uid == 0`.  AuthorizationServices defaults this attribute
-    to false if not specified."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:authenticate_user, :boolean => true) do
-    desc "Corresponds to `authenticate-user` in the authorization store."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:auth_class) do
-    desc "Corresponds to `class` in the authorization store; renamed due
-    to 'class' being a reserved word in Puppet."
-
-    newvalue(:user)
-    newvalue(:'evaluate-mechanisms')
-    newvalue(:allow)
-    newvalue(:deny)
-    newvalue(:rule)
-  end
-
-  newproperty(:comment) do
-    desc "The `comment` attribute for authorization resources."
-  end
-
-  newproperty(:group) do
-    desc "A group which the user must authenticate as a member of. This
-    must be a single group."
-  end
-
-  newproperty(:k_of_n) do
-    desc "How large a subset of rule mechanisms must succeed for successful
-    authentication. If there are 'n' mechanisms, then 'k' (the integer value
-    of this parameter) mechanisms must succeed. The most common setting for
-    this parameter is `1`. If `k-of-n` is not set, then every mechanism ---
-    that is, 'n-of-n' --- must succeed."
-
-    munge do |value|
-      @resource.munge_integer(value)
-    end
-  end
-
-  newproperty(:mechanisms, :array_matching => :all) do
-    desc "An array of suitable mechanisms."
-  end
-
-  newproperty(:rule, :array_matching => :all) do
-    desc "The rule(s) that this right refers to."
-  end
-
-  newproperty(:session_owner, :boolean => true) do
-    desc "Whether the session owner automatically matches this rule or right.
-    Corresponds to `session-owner` in the authorization store."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:shared, :boolean => true) do
-    desc "Whether the Security Server should mark the credentials used to gain
-    this right as shared. The Security Server may use any shared credentials
-    to authorize this right. For maximum security, set sharing to false so
-    credentials stored by the Security Server for one application may not be
-    used by another application."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:timeout) do
-    desc "The number of seconds in which the credential used by this rule will
-    expire. For maximum security where the user must authenticate every time,
-    set the timeout to 0. For minimum security, remove the timeout attribute
-    so the user authenticates only once per session."
-
-    munge do |value|
-      @resource.munge_integer(value)
-    end
-  end
-
-  newproperty(:tries) do
-    desc "The number of tries allowed."
-    munge do |value|
-      @resource.munge_integer(value)
-    end
-  end
-
-end

data/lib/puppet/type/mailalias.rb

@@ -1,46 +0,0 @@
-module Puppet
-  Type.newtype(:mailalias) do
-    @doc = "Creates an email alias in the local alias database."
-
-    ensurable
-
-    newparam(:name, :namevar => true) do
-      desc "The alias name."
-    end
-
-    newproperty(:recipient, :array_matching => :all) do
-      desc "Where email should be sent.  Multiple values
-        should be specified as an array.  The file and the
-        recipient entries are mutually exclusive."
-    end
-
-    newproperty(:file) do
-      desc "A file containing the alias's contents.  The file and the
-        recipient entries are mutually exclusive."
-
-      validate do |value|
-	unless Puppet::Util.absolute_path?(value)
-	  fail Puppet::Error, _("File paths must be fully qualified, not '%{value}'") % { value: value }
-	end
-      end
-    end
-
-    newproperty(:target) do
-      desc "The file in which to store the aliases.  Only used by
-        those providers that write to disk."
-
-      defaultto { if @resource.class.defaultprovider.ancestors.include?(Puppet::Provider::ParsedFile)
-          @resource.class.defaultprovider.default_target
-        else
-          nil
-        end
-      }
-    end
-
-    validate do
-      if self[:recipient] && self[:file]
-	self.fail _("You cannot specify both a recipient and a file")
-      end
-    end
-  end
-end

data/lib/puppet/type/maillist.rb

@@ -1,62 +0,0 @@
-module Puppet
-  Type.newtype(:maillist) do
-    @doc = "Manage email lists.  This resource type can only create
-      and remove lists; it cannot currently reconfigure them."
-
-    ensurable do
-      defaultvalues
-
-      newvalue(:purged) do
-        provider.purge
-      end
-
-      def change_to_s(current_value, newvalue)
-        return _("Purged %{resource}") % { resource: resource } if newvalue == :purged
-        super
-      end
-
-      def insync?(is)
-        return true if is == :absent && should == :purged
-        super
-      end
-    end
-
-    newparam(:name, :namevar => true) do
-      desc "The name of the email list."
-    end
-
-    newparam(:description) do
-      desc "The description of the mailing list."
-    end
-
-    newparam(:password) do
-      desc "The admin password."
-    end
-
-    newparam(:webserver) do
-      desc "The name of the host providing web archives and the administrative interface."
-    end
-
-    newparam(:mailserver) do
-      desc "The name of the host handling email for the list."
-    end
-
-    newparam(:admin) do
-      desc "The email address of the administrator."
-    end
-
-    def generate
-      if provider.respond_to?(:aliases)
-        should = self.should(:ensure) || :present
-        if should == :purged
-          should = :absent
-        end
-        atype = Puppet::Type.type(:mailalias)
-
-        provider.aliases.
-          reject  { |name,recipient| catalog.resource(:mailalias, name) }.
-          collect { |name,recipient| atype.new(:name => name, :recipient => recipient, :ensure => should) }
-      end
-    end
-  end
-end

data/lib/puppet/type/mcx.rb

@@ -1,98 +0,0 @@
-Puppet::Type.newtype(:mcx) do
-
-  @doc = "MCX object management using DirectoryService on OS X.
-
-The default provider of this type merely manages the XML plist as
-reported by the `dscl -mcxexport` command.  This is similar to the
-content property of the file type in Puppet.
-
-The recommended method of using this type is to use Work Group Manager
-to manage users and groups on the local computer, record the resulting
-puppet manifest using the command `puppet resource mcx`, then deploy it
-to other machines.
-
-**Autorequires:** If Puppet is managing the user, group, or computer that these
-MCX settings refer to, the MCX resource will autorequire that user, group, or computer.
-"
-  feature :manages_content, \
-    "The provider can manage MCXSettings as a string.",
-    :methods => [:content, :content=]
-
-  ensurable do
-    desc "Create or remove the MCX setting."
-
-    newvalue(:present) do
-      provider.create
-    end
-
-    newvalue(:absent) do
-      provider.destroy
-    end
-
-  end
-
-  newparam(:name) do
-    desc "The name of the resource being managed.
-    The default naming convention follows Directory Service paths:
-
-        /Computers/localhost
-        /Groups/admin
-        /Users/localadmin
-
-    The `ds_type` and `ds_name` type parameters are not necessary if the
-    default naming convention is followed."
-    isnamevar
-  end
-
-  newparam(:ds_type) do
-
-    desc "The DirectoryService type this MCX setting attaches to."
-
-    newvalues(:user, :group, :computer, :computerlist)
-
-  end
-
-  newparam(:ds_name) do
-    desc "The name to attach the MCX Setting to. (For example, `localhost`
-    when `ds_type => computer`.) This setting is not required, as it can be
-    automatically discovered when the resource name is parseable.  (For
-    example, in `/Groups/admin`, `group` will be used as the dstype.)"
-  end
-
-  newproperty(:content, :required_features => :manages_content) do
-    desc "The XML Plist used as the value of MCXSettings in DirectoryService.
-    This is the standard output from the system command:
-
-        dscl localhost -mcxexport /Local/Default/<ds_type>/ds_name
-
-    Note that `ds_type` is capitalized and plural in the dscl command."
-  end
-
-  # JJM Yes, this is not DRY at all.  Because of the code blocks
-  # autorequire must be done this way.  I think.
-
-  def setup_autorequire(type)
-    # value returns a Symbol
-    ds_type = value(:ds_type)
-    ds_name = value(:ds_name)
-    if ds_type == type
-      rval = [ ds_name.to_s ]
-    else
-      rval = [ ]
-    end
-    rval
-  end
-
-  autorequire(:user) do
-    setup_autorequire(:user)
-  end
-
-  autorequire(:group) do
-    setup_autorequire(:group)
-  end
-
-  autorequire(:computer) do
-    setup_autorequire(:computer)
-  end
-
-end