# This module is distributed under the GNU Affero General Public License:
# 
# Monkeysphere module for puppet
# Copyright (C) 2009-2010 Sarava Group
# 
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or any later version.
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
# 
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

#
# Class for monkeysphere management
#
class monkeysphere {
  # The needed packages
  package { monkeysphere: ensure => installed, }

}

class monkeysphere::import_key inherits monkeysphere {
  $key = "ssh://${fqdn}"
  # Server host key import 
  exec { "/usr/sbin/monkeysphere-host import-key /etc/ssh/ssh_host_rsa_key $key":
	user    => "root",
	unless => "/usr/sbin/monkeysphere-host s | grep $key"
  }
}

# Server host key publication
class monkeysphere::publish_key inherits monkeysphere { 
  exec { "/usr/sbin/monkeysphere-host publish-key":
  enviroment => "MONKEYSPHERE_PROMPT=false",
	user    => "root",
  }
}

# add certifiers
define monkeysphere::add_certifiers( $keyid ) {
  exec { "/usr/sbin/monkeysphere-authentication add-id-certifier $keyid":
	environment => "MONKEYSPHERE_PROMPT=false",
	user    => "root",
	require => [ Package["monkeysphere"] ],
	unless => "/usr/sbin/monkeysphere-authentication list-id-certifiers | grep $keyid"
  }
}
define monkeysphere::root_authorized_user_ids( $file ) {
  file {
    "/root/.monkeysphere":
      owner => "root",
      group => "root",
      mode => 755,
      ensure => directory,
  }
  file {
    "/root/.monkeysphere/authorized_user_ids":
      owner => "root",
      group => "root",
      mode => 644,
      source => "$file",
      ensure => present,
      recurse => true,
  }
  exec { "/usr/sbin/monkeysphere-authentication update-users root":
	user    => "root",
	require => [ Package["monkeysphere"] ],
        onlyif => "/usr/bin/test /root/.monkeysphere/authorized_user_ids -nt /var/lib/monkeysphere/authorized_keys/root" 
  }
}