Merge pull request #220 from szponek/fix-auth-tls-ovpn-profile-and-ld…

…ap-auth-file-perms Fix auth tls ovpn profile and ldap auth file perms
voxpupuli · Feb 13, 2017 · 9a0378c · 9a0378c
2 parents af9b400 + 3db9c46
commit 9a0378c
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/manifests/client.pp b/manifests/client.pp
@@ -421,7 +421,7 @@
 
     concat::fragment { "${etc_directory}/openvpn/${server}/download-configs/${name}.ovpn/tls_auth_close_tag":
       target  => "${etc_directory}/openvpn/${server}/download-configs/${name}.ovpn",
-      content => "</tls-auth>\n",
+      content => "</tls-auth>\nkey-direction 1\n",
       order   => '13'
     }
   }

diff --git a/manifests/server.pp b/manifests/server.pp
@@ -682,6 +682,8 @@
     file {
       "${etc_directory}/openvpn/${name}/auth/ldap.conf":
         ensure  => present,
+        owner   => root,
+        mode    => '0400',
         content => template('openvpn/ldap.erb'),
         require => Package['openvpn-auth-ldap'],
     }