Remove auth-constraint from web.xml if preauthenticated mode enabled

voxpupuli · Mar 8, 2016 · b710ab3 · b710ab3
1 parent 801746f
commit b710ab3
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/manifests/config/global/web.pp b/manifests/config/global/web.pp
@@ -33,4 +33,20 @@
     incl    => $rundeck::params::web_xml,
     changes => [ "set web-app/session-config/session-timeout/#text '${session_timeout}'" ],
   }
+
+  if $rundeck::preauthenticated_config['enabled'] {
+    augeas { 'rundeck/web.xml/security-constraint/auth-constraint':
+      lens    => 'Xml.lns',
+      incl    => $rundeck::params::web_xml,
+      changes => [ 'rm web-app/security-constraint/auth-constraint' ],
+    }
+  }
+  else {
+    augeas { 'rundeck/web.xml/security-constraint/auth-constraint/role-name':
+      lens    => 'Xml.lns',
+      incl    => $rundeck::params::web_xml,
+      changes => [ "set web-app/security-constraint[last()+1]/auth-constraint/role-name/#text '*'" ],
+      onlyif  => 'match web-app/security-constraint/auth-constraint/role-name size == 0',
+    }
+  }
 }