# == Class: nslcd
#
# This class manages the nslcd server and service.
class nslcd (
  $package_ensure      = $nslcd::params::package_ensure,
  $package_name        = $nslcd::params::package_name,
  $service_ensure      = $nslcd::params::service_ensure,
  $service_enable      = $nslcd::params::service_enable,
  $service_name        = $nslcd::params::service_name,
  $uid                 = $nslcd::params::uid,
  $gid                 = $nslcd::params::gid,
  $config              = $nslcd::params::config,
  $config_user         = $nslcd::params::config_user,
  $config_group        = $nslcd::params::config_group,
  $config_mode         = $nslcd::params::config_mode,
  $ldap_uris           = $nslcd::params::ldap_uris,
  $ldap_version        = $nslcd::params::ldap_version,
  $ldap_binddn         = $nslcd::params::ldap_binddn,
  $ldap_bindpw         = $nslcd::params::ldap_bindpw,
  $ldap_search_base    = $nslcd::params::ldap_search_base,
  $ldap_search_scope   = $nslcd::params::ldap_search_scope,
  $ldap_filters        = $nslcd::params::ldap_filters,
  $ldap_maps           = $nslcd::params::ldap_maps,
  $ldap_ssl            = $nslcd::params::ldap_ssl,
  $ldap_tls_reqcert    = $nslcd::params::ldap_tls_reqcert,
  $ldap_tls_cacertfile = $nslcd::params::ldap_tls_cacertfile,
) inherits nslcd::params {

  # Input validation
  $valid_ldap_versions     = [ '2', '3' ]
  $valid_ldap_ssl          = [ 'on', 'off', 'start_tls' ]
  $valid_ldap_tls_reqcert  = [ 'never', 'allow', 'try', 'demand', 'hard' ]
  $valid_ldap_search_scope = [ 'sub', 'subtree', 'one', 'onelevel', 'base' ]

  validate_re($ldap_version, $valid_ldap_versions)
  validate_re($ldap_ssl, $valid_ldap_ssl)
  validate_re($ldap_tls_reqcert, $valid_ldap_tls_reqcert)
  validate_re($ldap_search_scope, $valid_ldap_search_scope)

  anchor { 'nslcd::begin': } ->
  class { 'nslcd::install': } ->
  class { 'nslcd::config': } ~>
  class { 'nslcd::service': } ->
  anchor { 'nslcd::end': }

}