diff --git a/manifests/init.pp b/manifests/init.pp index b420cbe..2cad72d 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -20,6 +20,7 @@ class nslcd ( $ldap_binddn = $nslcd::params::ldap_binddn, $ldap_bindpw = $nslcd::params::ldap_bindpw, $ldap_search_base = $nslcd::params::ldap_search_base, + $ldap_group_base = $nslcd::params::ldap_group_base, $ldap_search_scope = $nslcd::params::ldap_search_scope, $config_options = $nslcd::params::config_options, $ldap_filters = $nslcd::params::ldap_filters, diff --git a/manifests/params.pp b/manifests/params.pp index fc61ce3..54172b2 100644 --- a/manifests/params.pp +++ b/manifests/params.pp @@ -13,7 +13,8 @@ class nslcd::params { $ldap_version = '3' $ldap_binddn = undef $ldap_bindpw = undef - $ldap_search_base = '' + $ldap_search_base = undef + $ldap_group_base = undef $ldap_search_scope = 'subtree' $config_options = {} $ldap_filters = {} diff --git a/templates/nslcd.erb b/templates/nslcd.erb index 631bf67..fd2e238 100644 --- a/templates/nslcd.erb +++ b/templates/nslcd.erb @@ -14,6 +14,10 @@ ldap_version <%= @ldap_version %> # The search base that will be used for all queries. base <%= @ldap_search_base %> +<% if @ldap_group_base -%> +base group <%= @ldap_group_base -%> +<% end -%> + <% if @ldap_binddn and @ldap_bindpw -%> # The DN to bind with for normal lookups.