puppet 5.5.22 → 6.0.0

data/lib/puppet/type/host.rb

@@ -1,95 +0,0 @@
-require 'puppet/property/ordered_list'
-
-module Puppet
-  Type.newtype(:host) do
-    ensurable
-
-    newproperty(:ip) do
-      desc "The host's IP address, IPv4 or IPv6."
-
-
-      def valid_v4?(addr)
-        if /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/ =~ addr
-          return $~.captures.all? {|i| i = i.to_i; i >= 0 and i <= 255 }
-        end
-        return false
-      end
-
-      def valid_v6?(addr)
-        # http://forums.dartware.com/viewtopic.php?t=452
-        # ...and, yes, it is this hard. Doing it programmatically is harder.
-        return true if addr =~ /^\s*((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}))|:)))(%.+)?\s*$/
-
-        return false
-      end
-      def valid_newline?(addr)
-        return false if (addr =~ /\n/ || addr =~ /\r/)
-        return true
-      end
-
-      validate do |value|
-        return true if ((valid_v4?(value) || valid_v6?(value)) && (valid_newline?(value)))
-        raise Puppet::Error, _("Invalid IP address %{value}") % { value: value.inspect }
-      end
-    end
-
-    # for now we use OrderedList to indicate that the order does matter.
-    newproperty(:host_aliases, :parent => Puppet::Property::OrderedList) do
-      desc "Any aliases the host might have.  Multiple values must be
-        specified as an array."
-
-      def delimiter
-        " "
-      end
-
-      def inclusive?
-        true
-      end
-
-      validate do |value|
-        # This regex already includes newline check.
-        raise Puppet::Error, _("Host aliases cannot include whitespace") if value =~ /\s/
-        raise Puppet::Error, _("Host aliases cannot be an empty string. Use an empty array to delete all host_aliases ") if value =~ /^\s*$/
-      end
-
-    end
-
-    newproperty(:comment) do
-      desc "A comment that will be attached to the line with a # character."
-      validate do |value|
-        raise Puppet::Error, _("Comment cannot include newline") if (value =~ /\n/ || value =~ /\r/)
-      end
-    end
-
-    newproperty(:target) do
-      desc "The file in which to store service information.  Only used by
-        those providers that write to disk. On most systems this defaults to `/etc/hosts`."
-
-      defaultto { if @resource.class.defaultprovider.ancestors.include?(Puppet::Provider::ParsedFile)
-        @resource.class.defaultprovider.default_target
-        else
-          nil
-        end
-      }
-    end
-
-    newparam(:name) do
-      desc "The host name."
-
-      isnamevar
-
-      validate do |value|
-        value.split('.').each do |hostpart|
-          unless hostpart =~ /^([\w]+|[\w][\w\-]+[\w])$/
-            raise Puppet::Error, _("Invalid host name")
-          end
-        end
-        raise Puppet::Error, _("Hostname cannot include newline") if (value =~ /\n/ || value =~ /\r/)
-      end
-    end
-
-    @doc = "Installs and manages host entries.  For most systems, these
-      entries will just be in `/etc/hosts`, but some systems (notably OS X)
-      will have different solutions."
-  end
-end

data/lib/puppet/type/interface.rb

@@ -1,121 +0,0 @@
-#
-# Manages an interface on a given router or switch
-#
-
-require 'puppet/util/network_device/ipcalc'
-
-Puppet::Type.newtype(:interface) do
-
-    @doc = "This represents a router or switch interface. It is possible to manage
-    interface mode (access or trunking, native vlan and encapsulation) and
-    switchport characteristics (speed, duplex)."
-
-    apply_to_device
-
-    ensurable do
-      defaultvalues
-
-      aliasvalue :shutdown, :absent
-      aliasvalue :no_shutdown, :present
-
-      defaultto { :no_shutdown }
-    end
-
-    newparam(:name) do
-      desc "The interface's name."
-    end
-
-    newparam(:device_url) do
-      desc "The URL at which the router or switch can be reached."
-    end
-
-    newproperty(:description) do
-      desc "Interface description."
-
-      defaultto { @resource[:name] }
-    end
-
-    newproperty(:speed) do
-      desc "Interface speed."
-      newvalues(:auto, /^\d+/)
-    end
-
-    newproperty(:duplex) do
-      desc "Interface duplex."
-      newvalues(:auto, :full, :half)
-    end
-
-    newproperty(:access_vlan) do
-      desc "Interface static access vlan."
-      newvalues(/^\d+/)
-    end
-
-    newproperty(:native_vlan) do
-      desc "Interface native vlan when trunking."
-      newvalues(/^\d+/)
-    end
-
-    newproperty(:encapsulation) do
-      desc "Interface switchport encapsulation."
-      newvalues(:none, :dot1q, :isl, :negotiate)
-    end
-
-    newproperty(:mode) do
-      desc "Interface switchport mode."
-      newvalues(:access, :trunk, 'dynamic auto', 'dynamic desirable')
-    end
-
-    newproperty(:allowed_trunk_vlans) do
-      desc "Allowed list of Vlans that this trunk can forward."
-      newvalues(:all, /./)
-    end
-
-    newproperty(:etherchannel) do
-      desc "Channel group this interface is part of."
-      newvalues(/^\d+/)
-    end
-
-    newproperty(:ipaddress, :array_matching => :all) do
-      include Puppet::Util::NetworkDevice::IPCalc
-
-      desc "IP Address of this interface. Note that it might not be possible to set
-      an interface IP address; it depends on the interface type and device type.
-
-      Valid format of ip addresses are:
-
-      * IPV4, like 127.0.0.1
-      * IPV4/prefixlength like 127.0.1.1/24
-      * IPV6/prefixlength like FE80::21A:2FFF:FE30:ECF0/128
-      * an optional suffix for IPV6 addresses from this list: `eui-64`, `link-local`
-
-      It is also possible to supply an array of values.
-      "
-
-      validate do |values|
-        values = [values] unless values.is_a?(Array)
-        values.each do |value|
-          self.fail _("Invalid interface ip address") unless parse(value.gsub(/\s*(eui-64|link-local)\s*$/,''))
-        end
-      end
-
-      munge do |value|
-        option = value =~ /eui-64|link-local/i ? value.gsub(/^.*?\s*(eui-64|link-local)\s*$/,'\1') : nil
-        [parse(value.gsub(/\s*(eui-64|link-local)\s*$/,'')), option].flatten
-      end
-
-      def value_to_s(value)
-        value = [value] unless value.is_a?(Array)
-        value.map{ |v| "#{v[1]}/#{v[0]} #{v[2]}"}.join(",")
-      end
-
-      def change_to_s(currentvalue, newvalue)
-        currentvalue = value_to_s(currentvalue) if currentvalue != :absent
-        newvalue = value_to_s(newvalue)
-        super(currentvalue, newvalue)
-      end
-    end
-
-  def present?(current_values)
-    super && current_values[:ensure] != :shutdown
-  end
-end

data/lib/puppet/type/k5login.rb

@@ -1,165 +0,0 @@
-# Plug-in type for handling k5login files
-require 'puppet/util'
-require 'puppet/util/selinux'
-require 'puppet/type/file/selcontext'
-
-Puppet::Type.newtype(:k5login) do
-  @doc = "Manage the `.k5login` file for a user.  Specify the full path to
-    the `.k5login` file as the name, and an array of principals as the
-    `principals` attribute."
-
-  ensurable
-
-  # Principals that should exist in the file
-  newproperty(:principals, :array_matching => :all) do
-    desc "The principals present in the `.k5login` file. This should be specified as an array."
-  end
-
-  # The path/name of the k5login file
-  newparam(:path) do
-    isnamevar
-    desc "The path to the `.k5login` file to manage.  Must be fully qualified."
-
-    validate do |value|
-      unless absolute_path?(value)
-        raise Puppet::Error, _("File paths must be fully qualified.")
-      end
-    end
-  end
-
-  # To manage the mode of the file
-  newproperty(:mode) do
-    desc "The desired permissions mode of the `.k5login` file."
-    defaultto { "644" }
-  end
-
-  # To manage the selinux user of the file
-  newproperty(:seluser, :parent => Puppet::SELFileContext) do
-    desc "What the SELinux user component of the context of the file should be.
-      Any valid SELinux user component is accepted.  For example `user_u`.
-      If not specified it defaults to the value returned by matchpathcon for
-      the file, if any exists.  Only valid on systems with SELinux support
-      enabled."
-
-    defaultto { "user_u" }
-  end
-
-  # To manage the selinux role of the file
-  newproperty(:selrole, :parent => Puppet::SELFileContext) do
-    desc "What the SELinux role component of the context of the file should be.
-      Any valid SELinux role component is accepted.  For example `role_r`.
-      If not specified it defaults to the value returned by matchpathcon for
-      the file, if any exists.  Only valid on systems with SELinux support
-      enabled."
-
-    defaultto { "object_r" }
-  end
-
-  # To manage the selinux type of the file
-  newproperty(:seltype, :parent => Puppet::SELFileContext) do
-    desc "What the SELinux type component of the context of the file should be.
-      Any valid SELinux type component is accepted.  For example `tmp_t`.
-      If not specified it defaults to the value returned by matchpathcon for
-      the file, if any exists.  Only valid on systems with SELinux support
-      enabled."
-
-    # to my knowledge, `krb5_home_t` is the only valid type for .k5login
-    defaultto { "krb5_home_t" }
-  end
-
-  # To manage the selinux range of the file
-  newproperty(:selrange, :parent => Puppet::SELFileContext) do
-    desc "What the SELinux range component of the context of the file should be.
-      Any valid SELinux range component is accepted.  For example `s0` or
-      `SystemHigh`.  If not specified it defaults to the value returned by
-      matchpathcon for the file, if any exists.  Only valid on systems with
-      SELinux support enabled and that have support for MCS (Multi-Category
-      Security)."
-
-    defaultto { "s0" }
-  end
-
-  # Stat our file.
-  #
-  # We use the initial value :needs_stat to ensure we only stat the file once,
-  # but can also keep track of a failed stat (@stat == nil). This also allows
-  # us to re-stat on demand by setting @stat = :needs_stat.
-  def stat
-    return @stat unless @stat == :needs_stat
-
-    @stat = begin
-      Puppet::FileSystem.stat(self[:path])
-    rescue Errno::ENOENT
-      nil
-    rescue Errno::ENOTDIR
-      nil
-    rescue Errno::EACCES
-      warning _("Could not stat; permission denied")
-      nil
-    end
-  end
-
-  def initialize(args)
-    @stat = :needs_stat
-    super
-  end
-
-  # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-
-  provide(:k5login) do
-    desc "The k5login provider is the only provider for the k5login
-      type."
-
-    include Puppet::Util::SELinux
-
-    # Does this file exist?
-    def exists?
-      Puppet::FileSystem.exist?(@resource[:name])
-    end
-
-    # create the file
-    def create
-      write(@resource.should(:principals))
-      should_mode = @resource.should(:mode)
-      unless self.mode == should_mode
-        self.mode = should_mode
-      end
-    end
-
-    # remove the file
-    def destroy
-      Puppet::FileSystem.unlink(@resource[:name])
-    end
-
-    # Return the principals
-    def principals
-      if Puppet::FileSystem.exist?(@resource[:name])
-        File.readlines(@resource[:name]).collect { |line| line.chomp }
-      else
-        :absent
-      end
-    end
-
-    # Write the principals out to the k5login file
-    def principals=(value)
-      write(value)
-    end
-
-    # Return the mode as an octal string, not as an integer
-    def mode
-      "%o" % (Puppet::FileSystem.stat(@resource[:name]).mode & 007777)
-    end
-
-    # Set the file mode, converting from a string to an integer.
-    def mode=(value)
-      File.chmod(Integer("0#{value}"), @resource[:name])
-    end
-
-    private
-    def write(value)
-      Puppet::Util.replace_file(@resource[:name], 0644) do |f|
-        f.puts value
-      end
-    end
-  end
-end

data/lib/puppet/type/macauthorization.rb

@@ -1,167 +0,0 @@
-Puppet::Type.newtype(:macauthorization) do
-
-  @doc = "Manage the Mac OS X authorization database. See the
-    [Apple developer site](https://developer.apple.com/library/content/documentation/Security/Conceptual/Security_Overview/AuthenticationAndAuthorization/AuthenticationAndAuthorization.html)
-    for more information.
-
-    Note that authorization store directives with hyphens in their names have
-    been renamed to use underscores, as Puppet does not react well to hyphens
-    in identifiers.
-
-    **Autorequires:** If Puppet is managing the `/etc/authorization` file, each
-    macauthorization resource will autorequire it."
-
-  ensurable
-
-  autorequire(:file) do
-    ["/etc/authorization"]
-  end
-
-  def munge_boolean(value)
-    case value
-    when true, "true", :true
-      :true
-    when false, "false", :false
-      :false
-    else
-      fail("munge_boolean only takes booleans")
-    end
-  end
-
-  def munge_integer(value)
-      Integer(value)
-  rescue ArgumentError
-      fail _("munge_integer only takes integers")
-  end
-
-  newparam(:name) do
-    desc "The name of the right or rule to be managed.
-    Corresponds to `key` in Authorization Services. The key is the name
-    of a rule. A key uses the same naming conventions as a right. The
-    Security Server uses a rule's key to match the rule with a right.
-    Wildcard keys end with a '.'. The generic rule has an empty key value.
-    Any rights that do not match a specific rule use the generic rule."
-
-    isnamevar
-  end
-
-  newproperty(:auth_type) do
-    desc "Type --- this can be a `right` or a `rule`. The `comment` type has
-    not yet been implemented."
-
-    newvalue(:right)
-    newvalue(:rule)
-    # newvalue(:comment)  # not yet implemented.
-  end
-
-  newproperty(:allow_root, :boolean => true) do
-    desc "Corresponds to `allow-root` in the authorization store. Specifies
-    whether a right should be allowed automatically if the requesting process
-    is running with `uid == 0`.  AuthorizationServices defaults this attribute
-    to false if not specified."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:authenticate_user, :boolean => true) do
-    desc "Corresponds to `authenticate-user` in the authorization store."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:auth_class) do
-    desc "Corresponds to `class` in the authorization store; renamed due
-    to 'class' being a reserved word in Puppet."
-
-    newvalue(:user)
-    newvalue(:'evaluate-mechanisms')
-    newvalue(:allow)
-    newvalue(:deny)
-    newvalue(:rule)
-  end
-
-  newproperty(:comment) do
-    desc "The `comment` attribute for authorization resources."
-  end
-
-  newproperty(:group) do
-    desc "A group which the user must authenticate as a member of. This
-    must be a single group."
-  end
-
-  newproperty(:k_of_n) do
-    desc "How large a subset of rule mechanisms must succeed for successful
-    authentication. If there are 'n' mechanisms, then 'k' (the integer value
-    of this parameter) mechanisms must succeed. The most common setting for
-    this parameter is `1`. If `k-of-n` is not set, then every mechanism ---
-    that is, 'n-of-n' --- must succeed."
-
-    munge do |value|
-      @resource.munge_integer(value)
-    end
-  end
-
-  newproperty(:mechanisms, :array_matching => :all) do
-    desc "An array of suitable mechanisms."
-  end
-
-  newproperty(:rule, :array_matching => :all) do
-    desc "The rule(s) that this right refers to."
-  end
-
-  newproperty(:session_owner, :boolean => true) do
-    desc "Whether the session owner automatically matches this rule or right.
-    Corresponds to `session-owner` in the authorization store."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:shared, :boolean => true) do
-    desc "Whether the Security Server should mark the credentials used to gain
-    this right as shared. The Security Server may use any shared credentials
-    to authorize this right. For maximum security, set sharing to false so
-    credentials stored by the Security Server for one application may not be
-    used by another application."
-
-    newvalue(:true)
-    newvalue(:false)
-
-    munge do |value|
-      @resource.munge_boolean(value)
-    end
-  end
-
-  newproperty(:timeout) do
-    desc "The number of seconds in which the credential used by this rule will
-    expire. For maximum security where the user must authenticate every time,
-    set the timeout to 0. For minimum security, remove the timeout attribute
-    so the user authenticates only once per session."
-
-    munge do |value|
-      @resource.munge_integer(value)
-    end
-  end
-
-  newproperty(:tries) do
-    desc "The number of tries allowed."
-    munge do |value|
-      @resource.munge_integer(value)
-    end
-  end
-
-end