class matrix::ldapauthclient {
	package { "ldap-auth-client": ensure => installed }

        line { nsswitch_passwd_compact_off:
        file => "/etc/nsswitch.conf",
        line => 'passwd:         compat',
        ensure => absent,
        require => Package["ldap-auth-client"]
        }
	line { nsswitch_passwd_ldap_on:
        file => "/etc/nsswitch.conf",
        line => 'passwd:         files ldap',
        ensure => present,
        require => Package["ldap-auth-client"]
        }

        line { nsswitch_group_compact_off:
        file => "/etc/nsswitch.conf",
        line => 'group:          compat',
        ensure => absent,
        require => Package["ldap-auth-client"]
        }
        line { nsswitch_group_ldap_on:
        file => "/etc/nsswitch.conf",
        line => 'group:         files ldap',
        ensure => present,
        require => Package["ldap-auth-client"]
        }

	file { "/etc/pam.d/common-account":
	content => "account sufficient      pam_ldap.so\naccount required        pam_unix.so\n",
	ensure => present,
        require => Package["ldap-auth-client"]
	}

        file { "/etc/pam.d/common-auth":
        content => "auth    required        pam_group.so use_first_pass\nauth    sufficient      pam_ldap.so\nauth    required        pam_unix.so nullok_secure use_first_pass\n",
        ensure => present,
        require => Package["ldap-auth-client"]
        }

        file { "/etc/pam.d/common-password":
        content => "password sufficient      pam_ldap.so\npassword required        pam_unix.so nullok obscure min=4 max=8 md5\n",
        ensure => present,
        require => Package["ldap-auth-client"]
        }

        file { "/etc/pam.d/common-session":
        content => "session required        pam_unix.so\nsession required        pam_mkhomedir.so skel=/etc/skel/\nsession optional        pam_ldap.so\nsession optional        pam_foreground.so\n",
        ensure => present,
        require => Package["ldap-auth-client"]
        }
}