Added new VO's for voms client

.gitignore

@@ -1 +1,21 @@
-pkg
+pkg/
+Gemfile.lock
+Gemfile.local
+vendor/
+.vendor/
+spec/fixtures/manifests/
+spec/fixtures/modules/
+.vagrant/
+.bundle/
+.ruby-version
+coverage/
+log/
+.idea/
+.dependencies/
+.librarian/
+Puppetfile.lock
+*.iml
+.*.sw?
+.yardoc/
+Guardfile
+

.project

@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>puppet-voms</name>
+	<comment></comment>
+	<projects>
+		<project>external-mysql</project>
+		<project>external-stdlib</project>
+	</projects>
+	<buildSpec>
+		<buildCommand>
+			<name>com.puppetlabs.geppetto.pp.dsl.ui.modulefileBuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
+		<buildCommand>
+			<name>org.eclipse.xtext.ui.shared.xtextBuilder</name>
+			<arguments>
+			</arguments>
+		</buildCommand>
+	</buildSpec>
+	<natures>
+		<nature>com.puppetlabs.geppetto.pp.dsl.ui.puppetNature</nature>
+		<nature>org.eclipse.xtext.ui.shared.xtextNature</nature>
+	</natures>
+</projectDescription>

.travis.yml

@@ -0,0 +1,17 @@
+sudo: false
+dist: trusty
+language: ruby
+cache: bundler
+before_install:
+- bundle -v
+- rm Gemfile.lock || true
+- gem update --system
+- gem update bundler
+- gem --version
+- bundle -v
+script:
+- bundle exec rake $CHECK
+matrix:
+- rvm: 2.4.2
+  bundler_args: --without system_tests development release
+  env: PUPPET_VERSION="~> 5.0" CHECK=build DEPLOY_TO_FORGE=yes 

CHANGELOG

@@ -1,3 +1,14 @@
+2018-09-03  Andrea Manzi  <[email protected]>
+    * update voms servers for dteam
+2016-07-08  Andrea Manzi  <[email protected]>
+    * update LSST, DZERO and CDF vo params
+2016-06-29  Andrea Manzi  <[email protected]>
+    * updated CA DN for dteam
+2016-01-18 Frederic Schaer  <[email protected]>
+    * Puppet 4 support
+2015-12-11  Andrea Manzi  <[email protected]>
+    * Added travis files
+2015-03-30  Andrea Manzi  <[email protected]>
+    * Renaming voms-clients package to voms-clients-cpp
 2011-04-01  Ricardo Rocha  <[email protected]>
-
     * First Release

Gemfile

@@ -0,0 +1,77 @@
+source ENV['GEM_SOURCE'] || "https://rubygems.org"
+
+def location_for(place, fake_version = nil)
+  if place =~ /^(git[:@][^#]*)#(.*)/
+    [fake_version, { :git => $1, :branch => $2, :require => false }].compact
+  elsif place =~ /^file:\/\/(.*)/
+    ['>= 0', { :path => File.expand_path($1), :require => false }]
+  else
+    [place, { :require => false }]
+  end
+end
+
+group :test do
+  gem 'puppetlabs_spec_helper', '~> 2.5.0',                         :require => false
+  gem 'rspec-puppet', '~> 2.5',                                     :require => false
+  gem 'rspec-puppet-facts',                                         :require => false
+  gem 'rspec-puppet-utils',                                         :require => false
+  gem 'puppet-lint-leading_zero-check',                             :require => false
+  gem 'puppet-lint-trailing_comma-check',                           :require => false
+  gem 'puppet-lint-version_comparison-check',                       :require => false
+  gem 'puppet-lint-classes_and_types_beginning_with_digits-check',  :require => false
+  gem 'puppet-lint-unquoted_string-check',                          :require => false
+  gem 'puppet-lint-variable_contains_upcase',                       :require => false
+  gem 'metadata-json-lint',                                         :require => false
+  gem 'redcarpet',                                                  :require => false
+  gem 'rubocop', '~> 0.49.1',                                       :require => false if RUBY_VERSION >= '2.3.0'
+  gem 'rubocop-rspec', '~> 1.15.0',                                 :require => false if RUBY_VERSION >= '2.3.0'
+  gem 'mocha', '>= 1.2.1',                                          :require => false
+  gem 'coveralls',                                                  :require => false
+  gem 'simplecov-console',                                          :require => false
+  gem 'rack', '~> 1.0',                                             :require => false if RUBY_VERSION < '2.2.2'
+  gem 'parallel_tests',                                             :require => false
+end
+
+group :development do
+  gem 'travis',                   :require => false
+  gem 'travis-lint',              :require => false
+  gem 'guard-rake',               :require => false
+  gem 'overcommit', '>= 0.39.1',  :require => false
+end
+
+group :system_tests do
+  gem 'winrm',                         :require => false
+  if beaker_version = ENV['BEAKER_VERSION']
+    gem 'beaker', *location_for(beaker_version)
+  else
+    gem 'beaker', '>= 3.9.0', :require => false
+  end
+  if beaker_rspec_version = ENV['BEAKER_RSPEC_VERSION']
+    gem 'beaker-rspec', *location_for(beaker_rspec_version)
+  else
+    gem 'beaker-rspec',  :require => false
+  end
+  gem 'serverspec',                    :require => false
+  gem 'beaker-puppet_install_helper',  :require => false
+  gem 'beaker-module_install_helper',  :require => false
+end
+
+group :release do
+  gem 'github_changelog_generator',  :require => false if RUBY_VERSION >= '2.2.2'
+  gem 'puppet-blacksmith',           :require => false
+  gem 'voxpupuli-release',           :require => false, :git => 'https://github.com/voxpupuli/voxpupuli-release-gem'
+  gem 'puppet-strings', '~> 1.0',    :require => false
+end
+
+
+
+if facterversion = ENV['FACTER_GEM_VERSION']
+  gem 'facter', facterversion.to_s, :require => false, :groups => [:test]
+else
+  gem 'facter', :require => false, :groups => [:test]
+end
+
+ENV['PUPPET_VERSION'].nil? ? puppetversion = '~> 5.0' : puppetversion = ENV['PUPPET_VERSION'].to_s
+gem 'puppet', puppetversion, :require => false, :groups => [:test]
+
+# vim: syntax=ruby

README

@@ -0,0 +1,40 @@
+This module manages VOMS resources for VOMS clients. 
+
+VOMS is the Virtual Organization Membership Service, in use by gLite, EMI, and
+other grid computing projects.
+
+== Examples
+
+   voms::server { 
+    "voms_MyVO_cern":
+      vo     => "MyVO",
+      server => "voms.cern.ch",
+      port   => 15001,
+      dn     => ["/DC=ch/DC=cern/OU=computers/CN=voms.cern.ch"],
+      ca_dn  => ["/DC=ch/DC=cern/CN=CERN Trusted Certification Authority"];
+   }
+
+ The above declaration will create the files:
+
+ /etc/vomses/MyVO/voms.cern.ch
+ and
+ /etc/grid-security/vomsdir/MyVO/voms.cern.ch.lsc
+
+
+ For some VOs, you can probably find a predefined class you can enable which
+ does all the required setup without any additional configuration e.g:
+
+   class{'voms::atlas':}
+   or
+   class{'voms::dteam':}
+
+ Additions of new VOs will be accepted.
+
+== Authors
+
+ CERN IT/GT/DMS <[email protected]>
+ CERN IT/PS/PES <[email protected]>
+
+
+
+

README.md

@@ -1,33 +1,35 @@
 ## cernops-voms puppet module
 
-This module manages VOMS resources for VOMS clients, VOMS core and VOMS Admin.
+[![Puppet Forge](http://img.shields.io/puppetforge/v/lcgdm/voms.svg)](https://forge.puppetlabs.com/lcgdm/voms)
+[![Build Status](https://travis-ci.org/hep-puppet/puppet-voms.svg?branch=master)](https://travis-ci.org/hep-puppet/puppet-voms)
+
+This module manages VOMS resources for VOMS clients
 
 VOMS is the Virtual Organization Membership Service, in use by gLite, EMI, and
 other grid computing projects.
 
 ## Examples
 ### Client Examples
-Create files for the voms-proxy-init and voms-proxy-validate.
 
      voms::client{'MyVO':
         vo       => 'MyVO',
-        servers  => [{server => 'voms.cern.ch',
+        servers  => [{server => 'voms2.cern.ch',
                       port   => '15009',
-                      dn     => '/DC=ch/DC=cern/OU=computers/CN=voms.cern.ch',
-                      ca_dn  => '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'
+                      dn     => '/DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch',
+                      ca_dn  => '/DC=ch/DC=cern/CN=CERN Grid Certification Authority'
                      },
-                     {server => 'lcg-voms.cern.ch',
+                     {server => 'lcg-voms2.cern.ch',
                       port   => '15009',
-                       dn    => '/DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch',
-                       ca_dn => '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'
+                       dn    => '/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch',
+                       ca_dn => '/DC=ch/DC=cern/CN=CERN Grid Certification Authority'
                      }]
 
  The above declaration will create the files:
 
-     /etc/vomses/MyVO/voms.cern.ch
+     /etc/vomses/MyVO-voms.cern.ch
  and
 
-     /etc/grid-security/vomsdir/MyVO/voms.cern.ch.lsc
+     /etc/grid-security/vomsdir/MyVO/voms2.cern.ch.lsc
 
 
  For some VOs, you can probably find a predefined class to enable a
@@ -40,85 +42,3 @@ Create files for the voms-proxy-init and voms-proxy-validate.
 Additions of new VOs will be accepted, please submit pull requests
 however zero validation of parameters will be made.
 
-### A VOMS Core Example
-VOMS core is the main voms service and responds to voms-proxy-init requests.
-To configure a VOMS core services for two VOs.
-
-     # Configure defaults.
-     Voms::Core{
-         issuer => 'voms.example.org',
-         sqlpwd => 12345,
-         sqlhost => 'mysql.example.org'
-     }
-     # Configure VOs.
-     voms::core{'special.vo': port => 10000}
-     voms::core{'very.special.vo': port => 10001}
-
-For full list of available parameters see voms::core definition.
-
-### A VOMS Admin Example
-VOMS admin is the tomcat hosted webservice for managing  a Virtual Organisation.
-To configure a few  VOMS admin for a number of VOs.
-
-     # Configure defaults.
-     Voms::Admin{
-        sqlpwd => 12345,
-        sqlhost => 'mysql.example.org'
-     }
-     voms::admin{'special.vo': 
-        port => 10000,
-        mailfrom => '[email protected]'
-     }
-     voms::admin{'very.special.vo': 
-        port     => 10001,
-        mailfrom => '[email protected]',
-        config_hash => {'voms.cafiles.period' => 2000,
-                      'voms.notification.smtp-server' => '127.0.0.1'
-                     }
-     }
-
-For full list of available paramters see voms::admin definition.
-
-The voms::admin definition will not update or load database schemas
-however scripts are generated within /etc/voms-admin-puppet to 
-allow this to be done. e.g:
-
-    /etc/voms-admin-puppet/voms-admin-create-very.special.vo.sh 
-
-will create a schema for the 'very.special.vo'
-
-## Database Configuration
-VOMS admin and voms core require a database per VO. At this time this 
-puppet module only supports mysql. A mysql server can be 
-configured using puppetlabs-mysql module. 
-The Mysql users and access grants are exported as puppet resources from the 
-above voms::admin and voms::core declarations. Assuming default database
-names of <voname>_db for each VO the following manifest will install
-and configure mysql with all grant tables suitable for VOMS and VOMS-Admin
-services to connect to.
-
-     class{'mysql::server': }
-     class{'voms::mysql':
-           vo_dbs => ['special.vo_db','very.special.vo_db']
-     }
-
-This assumes your puppet service is configured to support 
-export resources.
-
-
-### Todo
-Configure tomcat and trustmanager outside this VOMS 
-module so other services can use it.
-
-Use the existing EMI yum repo puppet module rather than manage myself.
-
-Add some validation of items that are passed to voms admin with config hash,
-currently they will be blindly added to the voms.service.properties files.
-
-## Authors
- CERN IT/GT/DMS <[email protected]>, Ricardo Rocha
- CERN IT/PS/PES <[email protected]>, Steve Traylen
- Bugs, Comments, Pull requests - https://github.com/cernops/puppet-voms
-
-
-