htpasswd

Puppet module to manage htpasswd and htgroup files.

This module has the ability to manage users with the same username in multiple files. To be able to do this it uses the same approach that the builtin cron type uses with cronjobs: a marker comment before the managed entry. This means that you can not use this module to manage or remove existing entries in htpasswd files. If you need to manage exiting entries you can use https://github.com/benwtr/puppet-htpasswd , but your usernames will have to be unique across all managed htpasswd files on the same host.

This module does not manage the owner/group/mode of the htpasswd and htgroup files you specify. You have to use a separate file resource for that (see here for an explanation).

Compatibility

Puppet v3.x with Ruby v1.8.7, v1.9.3, v2.0.0

htpasswd type

add a user

htpasswd { 'dan':
  cryptpasswd => 'MrC7Aq3qPKPaK',  # encrypted password
  target      => '/etc/httpd/conf/htpasswd',
}

add a second user with the same username to a different file

htpasswd { 'dan2':
  username    => 'dan',
  cryptpasswd => 'djkhfsdhfkjsd',  # encrypted password
  target      => '/etc/httpd/conf/htpasswd2',
}

remove a user

htpasswd { user:
  ensure => absent,
  target => '/etc/httpd/conf/htpasswd',
}

htgroup type

add a group

htgroup { groupname:
  users  => [ user1, user2, ],
  target => '/etc/httpd/conf/htgroup',
}

remove a group

htgroup { groupname:
  ensure => absent,
  target => '/etc/httpd/conf/htgroup',
}

helper parser functions

ht_crypt('password', 'salt')

encrypt 'password' with 'salt' using the crypt method

ht_md5('password', 'salt')

encrypt 'password' with 'salt' using the apache MD5 method

ht_sha1('password')

encrypt 'password' using the apache SHA1 method

Credits

Apache MD5 algorithm ruby implementation taken from https://github.com/copiousfreetime/htauth by Jeremy Hinegardner.