Allow enabling the password policy overlay

README.md

@@ -89,6 +89,16 @@ With TLS/SSL enabled:
 *NOTE*: SSL certificates should reside in you puppet master
 file repository 'puppet:///files/ldap/'
 
+With password policies enabled:
+
+    class { 'ldap::server::master':
+      suffix          => 'dc=foo,dc=bar',
+      rootpw          => '{SHA}iEPX+SQWIR3p67lj/0zigSWTKHg=',
+      ppolicy         => true,
+      ppolicy_default => 'cn=default,ou=policies,dc=foo,dc=bar',
+      modules_inc     => [ 'ppolicy' ],
+    }
+
 #### Slave server ####
 
 Configure an OpenLdap slave:

manifests/server/master.pp

@@ -76,6 +76,14 @@
 #
 #    *Optional* (defaults to *'false'*)
 #
+#  [ppolicy]
+#
+#    *Optional* (defaults to *'false'*)
+#
+#  [policy_default]
+#
+#    *Optional* (defaults to *'nil'*)
+#
 #  [enable_motd]
 #    Use motd to report the usage of this module.
 #    *Requires*: https://github.com/torian/puppet-motd.git
@@ -137,6 +145,8 @@
   $syncprov_checkpoint = '100 10',
   $syncprov_sessionlog = '100',
   $sync_binddn         = false,
+  $ppolicy             = false,
+  $ppolicy_default     = nil,
   $enable_motd         = false,
   $ensure              = present) {
 
@@ -245,7 +255,7 @@
 
   # Additional configurations (for rc scripts)
   case $::osfamily {
-    
+
     'Debian' : {
       class { 'ldap::server::debian': ssl => $ssl }
     }

templates/etc/openldap/slapd.conf.erb

@@ -81,6 +81,16 @@ updateref <%= @sync_provider %>
 
 #######################################################################
 
+#######################################################################
+# << PPolicy
+
+<% if has_variable?('ppolicy') and @ppolicy == true then -%>
+overlay ppolicy
+ppolicy_default "<%= @ppolicy_default %>"
+<% end -%>
+
+#######################################################################
+
 checkpoint   512 30
 dbconfig set_cachesize      0 2097152 0
 dbconfig set_lk_max_objects 1500