initial commit

Copyright (c) 2019, Board of Trustees, Leland Stanford Jr. University

Permission is hereby granted, free of charge, to any person obtaining

a copy of this software and associated documentation files (the

"Software"), to deal in the Software without restriction, including

without limitation the rights to use, copy, modify, merge, publish,

distribute, sublicense, and/or sell copies of the Software, and to

permit persons to whom the Software is furnished to do so, subject to

the following conditions:

The above copyright notice and this permission notice shall be

included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND

NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE

LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION

OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION

WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

#!/usr/bin/env ruby

#^syntax detection

forge "https://forgeapi.puppetlabs.com"

# ShibSP

mod 'suet-shibsp',

  :git => 'https://code.stanford.edu/et-puppet/shibsp.git'

# node

#### Table of Contents

1. [Overview](#overview)

2. [Module Description](#module-description)

3. [Limitations](#limitations)

## Overview

Module for installing simple apache proxy on a Debian system

## Module Description

## Limitations

# data/Debian.yaml

# generic defaults for Debian-based systems

---

webproxy::packages::package_type: apt

webproxy::packages::install:

  - libapache2-mod-webauthldap

  - nfs-common

  - heimdal-clients

  - ldap-utils

# WebAuth LDAP configuration.

WebAuthLdapHost ldap.itlab.stanford.edu

WebAuthLdapBase cn=people,dc=itlab,dc=stanford,dc=edu

WebAuthLdapAuthorizationAttribute isMemberOf

WebAuthKeyring /var/lib/webauth/keyring

WebAuthLdapKeytab /etc/webauth/keytab

WebAuthServiceTokenCache /var/lib/webauth/service_token_cache