first commit

README.md

+# su_kerberos
+
+## Quick Start
+
+Use this package to install Kerberos client software and the
+Stanford-recommended version of `/etc/krb5.conf`:
+```
+include su_kerberos
+```
+
+## Configuration parameters
+
+* `debian_client`: if the server where this Puppet module runs is Debian,
+this parameter determines which kerberos client package you will
+install. Its value must be one of `mit` or `heimdal`; the default is
+`mit`. If the server is not Debian this parameter has no effect.
+
+* `manage_etc_krb5conf`: if set to true (the default) will install the
+Stanford-recommended version of `/etc/krb5.conf` by the krb5conf Puppet
+module. Set this to false if you want to manage `/etc/krb5.conf` in some
+other class.
+

manifests/init.pp

+# Set up basic Kerberos configuration.
+
+# Do not use this class with Kerberos server as a Kerberos server usually
+# requires a customized Kerberos configuration.
+
+# $manage_etc_krb5conf: if set to true (the default) will install the
+# Stanford-recommended version of /etc/krb5.conf using the krb5conf Puppet
+# module. Set this to false if you want to manage /etc/krb5.conf in some
+# other class.
+
+# $debian_client: this determines which kerberos client package you
+# will install. Its value must be one of "mit' or "heimdal"; the default
+# is "mit'.
+
+class su_kerberos (
+  Boolean                $manage_etc_krb5conf = true,
+  Enum['heimdal', 'mit'] $debian_client       = 'mit',
+) {
+
+  # Step 1. Install the kerberos client.
+  case $::osfamily {
+    'RedHat': {
+      package { 'krb5-workstation': ensure => present }
+    }
+    'Debian': {
+      case $debian_client {
+        'mit':     { package { 'krb5-user':       ensure => present } }
+        'heimdal': { package { 'heimdal-clients': ensure => present } }
+        default:   { fail("unsupported debian_client value '${debian_client}'") }
+      }
+    }
+    default: {
+      fail("unsupported OS ${::operatingsystem}")
+    }
+  }
+
+  # Step 2. Install the default /etc/krb5.conf file appropriate for
+  # Stanford.
+  if ($manage_etc_krb5conf) {
+    krb5conf { '/etc/krb5.conf':
+      appdefaults_file => 'krb5conf/appdefaults',
+    }
+  }
+
+}