1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
# @summary
# Installs and configures `mod_auth_mellon`.
#
# @param mellon_cache_size
# Maximum number of sessions which can be active at once.
#
# @param mellon_lock_file
# Full path to a file used for synchronizing access to the session data.
#
# @param mellon_post_directory
# Full path of a directory where POST requests are saved during authentication.
#
# @param mellon_cache_entry_size
# Maximum size for a single session entry in bytes.
#
# @param mellon_post_ttl
# Delay in seconds before a saved POST request can be flushed.
#
# @param mellon_post_size
# Maximum size for saved POST requests.
#
# @param mellon_post_count
# Maximum amount of saved POST requests.
#
# @see https://github.com/Uninett/mod_auth_mellon for additional documentation.
#
class apache::mod::auth_mellon (
Optional[Integer] $mellon_cache_size = $apache::params::mellon_cache_size,
Optional[Stdlib::Absolutepath] $mellon_lock_file = $apache::params::mellon_lock_file,
Optional[Stdlib::Absolutepath] $mellon_post_directory = $apache::params::mellon_post_directory,
Optional[Integer] $mellon_cache_entry_size = undef,
Optional[Integer] $mellon_post_ttl = undef,
Optional[Integer] $mellon_post_size = undef,
Optional[Integer] $mellon_post_count = undef
) inherits apache::params {
include apache
include apache::mod::authn_core
::apache::mod { 'auth_mellon': }
# Template uses
# - All variables beginning with mellon_
$parameters = {
'mellon_cache_size' => $mellon_cache_size,
'mellon_cache_entry_size' => $mellon_cache_entry_size,
'mellon_lock_file' => $mellon_lock_file,
'mellon_post_directory' => $mellon_post_directory,
'mellon_post_ttl' => $mellon_post_ttl,
'mellon_post_size' => $mellon_post_size,
'mellon_post_count' => $mellon_post_count,
}
file { 'auth_mellon.conf':
ensure => file,
path => "${apache::mod_dir}/auth_mellon.conf",
mode => $apache::file_mode,
content => epp('apache/mod/auth_mellon.conf.epp', $parameters),
require => [Exec["mkdir ${apache::mod_dir}"],],
before => File[$apache::mod_dir],
notify => Class['Apache::Service'],
}
}
|
