diff options
author | Micah <micah@leap.se> | 2016-05-24 10:19:27 -0400 |
---|---|---|
committer | Micah <micah@leap.se> | 2016-05-24 10:19:27 -0400 |
commit | af6fdd31fb961fc1b7f408f51001e7a6d192a58a (patch) | |
tree | 8e5e443c2958f07027ebb60595007dd5b755d3a0 /manifests/add_user.pp |
Squashed 'puppet/modules/couchdb/' content from commit 76ff149
git-subtree-dir: puppet/modules/couchdb
git-subtree-split: 76ff149a095023611c05bbb00157d06f87b07c05
Diffstat (limited to 'manifests/add_user.pp')
-rw-r--r-- | manifests/add_user.pp | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/manifests/add_user.pp b/manifests/add_user.pp new file mode 100644 index 00000000..29c6a8c8 --- /dev/null +++ b/manifests/add_user.pp @@ -0,0 +1,39 @@ +define couchdb::add_user ( $roles, $pw, $salt = '' ) { + # Couchdb < 1.2 needs a pre-hashed pw and salt + # If you provide a salt, couchdb::add_user will assume that + # $pw is prehashed and pass both parameters to couchdb::update + # If $salt is empty, couchdb::add_user will assume that the pw + # is plaintext and will pass it to couchdb::update + + if $::couchdb::bigcouch == true { + $port = 5986 + } else { + $port = 5984 + } + + if $salt == '' { + # unhashed, plaintext pw, no salt. For couchdb >= 1.2 + $data = "{\"type\": \"user\", \"name\": \"${name}\", \"roles\": ${roles}, \"password\": \"${pw}\"}" + } else { + # prehashed pw with salt, for couchdb < 1.2 + # salt and encrypt pw + # str_and_salt2sha1 is a function from leap's stdlib module + $pw_and_salt = [ $pw, $salt ] + $sha = str_and_salt2sha1($pw_and_salt) + $data = "{\"type\": \"user\", \"name\": \"${name}\", \"roles\": ${roles}, \"password_sha\": \"${sha}\", \"salt\": \"${salt}\"}" + } + + # update the user with the given password unless they already work + couchdb::document { "update_user_${name}": + host => "127.0.0.1:${port}", + db => '_users', + id => "org.couchdb.user:${name}", + data => $data + } + + couchdb::query::setup { $name: + user => $name, + pw => $pw, + } + +} |