PAM Access - Hiera

[Mark Kraft]

Trevor,

Is there a way to create a pam::access:manage entry in Hiera? Or do I need to create a class in site:: then reference it in my hieradata?

I'm able to manage uses in a class using:

pam::access::manage { 'admin_group' :

  permission => '+',

  users => '(admin)',

  origins => ['10.55.40.'],

  order => 1000,

}

But was much easier when we were still using Node manifests to manage everything.  Now under Hiera it's a little more convoluted for me since I am still picking up the new way to do things.

Thanks in advance,

Mark Kraft

Sotera Defense Solutions

[Nick Markowski]

Mark,

Unfortunately, currently released versions of SIMP do not support pam access management in hiera.  SIMP-6 will have this capability; you can check out that functionality here https://github.com/simp/pupmod-simp-pam/blob/master/manifests/access.pp.  Until then, you are stuck with declaring pam::access::management resources in a class and including it as needed.