CHANGELOG.md

@@ -1,7 +1,20 @@
 # Change Log
 
-## [v3.2.0](https://github.com/ghoneycutt/puppet-module-pam/tree/v3.2.0)
+## [v3.3.0](https://github.com/ghoneycutt/puppet-module-pam/tree/v3.3.0) (2019-05-23)
+[Full Changelog](https://github.com/ghoneycutt/puppet-module-pam/compare/v3.2.0...v3.3.0)
 
+**Closed issues:**
+
+- Add support for SLES 15 [\#210](https://github.com/ghoneycutt/puppet-module-pam/issues/210)
+
+**Merged pull requests:**
+
+- GH-210 Add support for SLES 15 [\#212](https://github.com/ghoneycutt/puppet-module-pam/pull/212) ([ph84172](https://github.com/ph84172))
+- Simplify gemfile [\#209](https://github.com/ghoneycutt/puppet-module-pam/pull/209) ([ghoneycutt](https://github.com/ghoneycutt))
+- Update json requirement from ~\> 2.1.0 to ~\> 2.2.0 [\#208](https://github.com/ghoneycutt/puppet-module-pam/pull/208) ([dependabot-preview[bot]](https://github.com/apps/dependabot-preview))
+- Update json\_pure requirement from ~\> 2.1.0 to ~\> 2.2.0 [\#207](https://github.com/ghoneycutt/puppet-module-pam/pull/207) ([dependabot-preview[bot]](https://github.com/apps/dependabot-preview))
+
+## [v3.2.0](https://github.com/ghoneycutt/puppet-module-pam/tree/v3.2.0) (2019-01-15)
 [Full Changelog](https://github.com/ghoneycutt/puppet-module-pam/compare/v3.1.0...v3.2.0)
 
 **Implemented enhancements:**
@@ -41,9 +54,9 @@
 - Validate shell scripts [\#204](https://github.com/ghoneycutt/puppet-module-pam/pull/204) ([ghoneycutt](https://github.com/ghoneycutt))
 - Add Vagrant support [\#203](https://github.com/ghoneycutt/puppet-module-pam/pull/203) ([ghoneycutt](https://github.com/ghoneycutt))
 - Test with latest \(2.1.0\) release of trlinkin/nsswitch [\#202](https://github.com/ghoneycutt/puppet-module-pam/pull/202) ([ghoneycutt](https://github.com/ghoneycutt))
-- Update json requirement from ~\> 1.8.3 to ~\> 2.1.0 [\#201](https://github.com/ghoneycutt/puppet-module-pam/pull/201) ([dependabot[bot]](https://github.com/apps/dependabot))
-- Update rake requirement from ~\> 10.0 to ~\> 12.3 [\#200](https://github.com/ghoneycutt/puppet-module-pam/pull/200) ([dependabot[bot]](https://github.com/apps/dependabot))
-- Update json\_pure requirement from ~\> 1.8.3 to ~\> 2.1.0 [\#199](https://github.com/ghoneycutt/puppet-module-pam/pull/199) ([dependabot[bot]](https://github.com/apps/dependabot))
+- Update json requirement from ~\> 1.8.3 to ~\> 2.1.0 [\#201](https://github.com/ghoneycutt/puppet-module-pam/pull/201) ([dependabot-preview[bot]](https://github.com/apps/dependabot-preview))
+- Update rake requirement from ~\> 10.0 to ~\> 12.3 [\#200](https://github.com/ghoneycutt/puppet-module-pam/pull/200) ([dependabot-preview[bot]](https://github.com/apps/dependabot-preview))
+- Update json\_pure requirement from ~\> 1.8.3 to ~\> 2.1.0 [\#199](https://github.com/ghoneycutt/puppet-module-pam/pull/199) ([dependabot-preview[bot]](https://github.com/apps/dependabot-preview))
 
 ## [v3.0.0](https://github.com/ghoneycutt/puppet-module-pam/tree/v3.0.0) (2018-11-09)
 [Full Changelog](https://github.com/ghoneycutt/puppet-module-pam/compare/v2.33.0...v3.0.0)
@@ -469,4 +482,4 @@
 
 
 
-\* *This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*
+\* *This Change Log was automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*

CONTRIBUTING.md

@@ -38,10 +38,9 @@ Reference the issue number, in the format `(GH-###)`.
 # Release process
 
 1. update version in `metadata.json`
-1. run `github_changelog_generator`
-1. update `CHANGELOG.md` and change `unreleased` at the top to the
-   version, such as `v2.0.0`, and change `HEAD` to the same version,
-   such as `v2.0.0`.
+1. run `github_changelog_generator` with the version you updated in
+   `metadata.json`.
+    `github_changelog_generator --future-release v3.3.0`
 1. Update `REFERENCE.md` with the command `bundle exec rake reference`
 1. Commit changes and push to master
 1. Tag the new version, such as `git tag -a 'v2.0.0' -m 'v2.0.0'`

Gemfile

@@ -6,13 +6,13 @@ else
   gem 'puppet', :require => false
 end
 
-gem 'rake', '~> 12.3'
-gem 'json', "~> 2.1.0",                                 :require => false
-gem 'json_pure', "~> 2.1.0",                            :require => false
+gem 'rake'
+gem 'json',                                             :require => false
+gem 'json_pure',                                        :require => false
 gem 'metadata-json-lint',                               :require => false
-gem 'puppetlabs_spec_helper', '>= 2.7.0',               :require => false
-gem 'rspec-puppet', '~> 2.0',                           :require => false
-gem 'puppet-lint', '~> 2.0',                            :require => false
+gem 'puppetlabs_spec_helper',                           :require => false
+gem 'rspec-puppet',                                     :require => false
+gem 'puppet-lint',                                      :require => false
 gem 'puppet-lint-absolute_classname-check',             :require => false
 gem 'puppet-lint-alias-check',                          :require => false
 gem 'puppet-lint-empty_string-check',                   :require => false
@@ -26,17 +26,17 @@ gem 'puppet-lint-unquoted_string-check',                :require => false
 gem 'puppet-lint-variable_contains_upcase',             :require => false
 
 group :documentation do
-  gem 'yard',           require: false
-  gem 'redcarpet',      require: false
   gem 'puppet-strings', require: false
+  gem 'redcarpet',      require: false
+  gem 'yard',           require: false
 end
 
 group :system_tests do
-  gem 'beaker', '~> 4.x',             :require => false
-  gem 'beaker-rspec',                 :require => false
-  gem 'beaker-puppet',                :require => false
+  gem 'beaker',                       :require => false
   gem 'beaker-docker',                :require => false
-  gem 'serverspec',                   :require => false
-  gem 'beaker-puppet_install_helper', :require => false
   gem 'beaker-module_install_helper', :require => false
+  gem 'beaker-puppet',                :require => false
+  gem 'beaker-puppet_install_helper', :require => false
+  gem 'beaker-rspec',                 :require => false
+  gem 'serverspec',                   :require => false
 end

README.md

@@ -179,6 +179,7 @@ module aims to support the current and previous major Puppet versions.
  * Suse 10
  * Suse 11
  * Suse 12
+ * Suse 15
  * OpenSuSE 13.1
  * Ubuntu 12.04 LTS
  * Ubuntu 14.04 LTS

data/os/Suse/15.yaml

@@ -0,0 +1,26 @@
+---
+pam::common_files_create_links: true
+pam::common_files_suffix: '_pc'
+pam::common_files:
+  - common_account
+  - common_auth
+  - common_password
+  - common_session
+
+pam::pam_d_login_template: pam/login.suse15.erb
+pam::pam_d_sshd_template: pam/sshd.suse15.erb
+pam::package_name: pam
+pam::pam_auth_lines:
+  - 'auth  required  pam_env.so'
+  - 'auth  required  pam_unix.so try_first_pass'
+pam::pam_account_lines:
+  - 'account  required  pam_unix.so try_first_pass'
+pam::pam_password_lines:
+  - 'password  requisite  pam_cracklib.so'
+  - 'password  required   pam_unix.so use_authtok nullok shadow try_first_pass'
+pam::pam_session_lines:
+  - 'session  optional  pam_systemd.so'
+  - 'session  required  pam_limits.so'
+  - 'session  required  pam_unix.so try_first_pass'
+  - 'session  optional  pam_umask.so'
+  - 'session  optional  pam_env.so'

manifests/init.pp

@@ -245,8 +245,8 @@
     fail("osfamily RedHat's os.release.major is <${::facts['os']['release']['major']}> and must be 5, 6 or 7")
   } elsif $facts['os']['family'] == 'Solaris' and !($facts['kernelrelease'] in ['5.9','5.10','5.11']) {
     fail("osfamily Solaris' kernelrelease is <${facts['kernelrelease']}> and must be 5.9, 5.10 or 5.11")
-  } elsif $facts['os']['family'] == 'Suse' and !($facts['os']['release']['major'] in ['9','10','11','12','13']) {
-    fail("osfamily Suse's os.release.major is <${::facts['os']['release']['major']}> and must be 9, 10, 11, 12 or 13")
+  } elsif $facts['os']['family'] == 'Suse' and !($facts['os']['release']['major'] in ['9','10','11','12','13','15']) {
+    fail("osfamily Suse's os.release.major is <${::facts['os']['release']['major']}> and must be 9, 10, 11, 12, 13 or 15")
   } elsif $facts['os']['name'] == 'Debian' and !($facts['os']['release']['major'] in ['7','8','9']) {
     fail("Debian's os.release.major is <${facts['os']['release']['major']}> and must be 7, 8 or 9")
   } elsif $facts['os']['name'] == 'Ubuntu' and !($facts['os']['release']['major'] in ['12.04', '14.04', '16.04', '18.04']) {

metadata.json

@@ -1,6 +1,6 @@
 {
   "name": "ghoneycutt-pam",
-  "version": "3.2.0",
+  "version": "3.3.0",
   "author": "ghoneycutt",
   "summary": "Manage PAM",
   "description": "Manages PAM, including specifying users and groups in access.conf, limits.conf, and limits fragments",
@@ -69,7 +69,8 @@
         "9",
         "10",
         "11",
-        "12"
+        "12",
+        "15"
       ]
     },
     {
@@ -78,7 +79,8 @@
         "9",
         "10",
         "11",
-        "12"
+        "12",
+        "15"
       ]
     },
     {

spec/fixtures/pam_common_account_pc.defaults.suse15

@@ -0,0 +1,3 @@
+# This file is being maintained by Puppet.
+# DO NOT EDIT
+account  required  pam_unix.so try_first_pass

spec/fixtures/pam_common_auth_pc.defaults.suse15

@@ -0,0 +1,4 @@
+# This file is being maintained by Puppet.
+# DO NOT EDIT
+auth  required  pam_env.so
+auth  required  pam_unix.so try_first_pass

spec/fixtures/pam_common_password_pc.defaults.suse15

@@ -0,0 +1,4 @@
+# This file is being maintained by Puppet.
+# DO NOT EDIT
+password  requisite  pam_cracklib.so
+password  required   pam_unix.so use_authtok nullok shadow try_first_pass

spec/fixtures/pam_common_session_pc.defaults.suse15

@@ -0,0 +1,7 @@
+# This file is being maintained by Puppet.
+# DO NOT EDIT
+session  optional  pam_systemd.so
+session  required  pam_limits.so
+session  required  pam_unix.so try_first_pass
+session  optional  pam_umask.so
+session  optional  pam_env.so

spec/fixtures/pam_d_login.defaults.suse15

@@ -0,0 +1,9 @@
+#%PAM-1.0
+auth      requisite  pam_nologin.so
+auth      include    common-auth
+account   include    common-account
+password  include    common-password
+session   required   pam_loginuid.so
+session   include    common-session
+#session   optional   pam_lastlog.so nowtmp showfailed
+session   optional   pam_mail.so standard

spec/fixtures/pam_d_sshd.defaults.suse15

@@ -0,0 +1,9 @@
+#%PAM-1.0
+auth      requisite  pam_nologin.so
+auth      include    common-auth
+account   requisite  pam_nologin.so
+account   include    common-account
+password  include    common-password
+session   required   pam_loginuid.so
+session   include    common-session
+session   optional   pam_lastlog.so  silent noupdate showfailed

spec/spec_helper.rb

@@ -210,6 +210,30 @@ def platforms
             :symlink        => true,
           }, ],
       },
+    'suse15' =>
+      {
+        :facts_hash => {
+          :osfamily => 'Suse',
+          :operatingsystem => 'SLES',
+          :operatingsystemmajrelease => '15',
+          :os => {
+            'name' => 'openSUSE',
+            'family' => 'Suse',
+            'release' => {
+              'full'  => '15.0',
+              'major' => '15',
+              'minor' => '0'
+            }
+          },
+        },
+        :packages           => ['pam', ],
+        :files              => [
+          { :prefix         => 'pam_common_',
+            :types          => ['auth', 'account', 'password', 'session', ],
+            :suffix         => '_pc',
+            :symlink        => true,
+          }, ],
+      },
     'solaris9' =>
       {
         :facts_hash => {

templates/login.suse15.erb

@@ -0,0 +1,9 @@
+#%PAM-1.0
+auth      requisite  pam_nologin.so
+auth      include    common-auth
+account   include    common-account
+password  include    common-password
+session   required   pam_loginuid.so
+session   include    common-session
+#session   optional   pam_lastlog.so nowtmp showfailed
+session   optional   pam_mail.so standard

templates/sshd.suse15.erb

@@ -0,0 +1,9 @@
+#%PAM-1.0
+auth      requisite  pam_nologin.so
+auth      include    common-auth
+account   requisite  pam_nologin.so
+account   include    common-account
+password  include    common-password
+session   required   pam_loginuid.so
+session   include    common-session
+session   optional   pam_lastlog.so  silent noupdate showfailed