# Manage the sync scripts and their configurations.

# the reason that each one is selected seperately is that not all environments get the same sync scripts.
# while these are intended for install on the tools server,
# this is still flexible enough to put it on the master

class su_ldap::sync_scripts (
  $ldap_master_fqdn                   = undef,
  # select the sync scripts one by one in the hiera file
  $enable_ldap_wg_maint               = false,
  $enable_ldap_sync_attribute         = false,
  $enable_ldap_group_maint            = false,
  $enable_ldap_sync_sugal_attributes  = false,
  $enable_ldap_alias_maint            = false,
  $enable_posix_account_sync          = false,
  $enable_ldap_reports                = false,
) {

  # ldap-wg-maint.service
  if ($enable_ldap_wg_maint) {
    class { 'su_ldap::sync_scripts::ldap_wg_maint':
      ensure => present,
    }
  }

  # ldap-group-maint.service
  if ($enable_ldap_group_maint) {
    class { 's_ldap::base::sync_scripts::ldap_group_maint':
      ensure => present
    }
  }

  # ldap-sync-sugal-attributes.service
  if ($enable_ldap_sync_sugal_attributes) {
    class { 'su_ldap::sync_scripts::ldap_sync_sugal_attributes':
      ensure => present
    }
  }

  # ldap-sync-suprivilegegroup.service
  if (false) {
    class { 'su_ldap::sync_scripts::ldap_sync_suprivilegegroup':
      ensure => present
    }
  }

  # ldap-alias-maint
  if (false) {
    class{ 'su_ldap::sync_scripts::ldap_alias_maint':
      ensure => present
    }

  }

  # posix accounts
  if ($enable_posix_account_sync) {
    su_ldap::sync_scripts::posix_account_sync { 'aeroastroarl': ensure => present }
    su_ldap::sync_scripts::posix_account_sync { 'anesthesia':   ensure => present }
    su_ldap::sync_scripts::posix_account_sync { 'statistics':   ensure => present }
  }

  # ldap_reports
  if ($enable_ldap_reports) {
    class{ 'su_ldap::sync_scripts::ldap-reports':
      ensure => present
    }
  }


# end of file
}