ldap: move netgroup config to separate modules

Move the netgroup configuration to separate modules to allow different
configuration for different systems.

manifests/ldap.pp

@@ -15,17 +15,6 @@ class freebsd::ldap {
     mode   => '0644',
   }
 
-  file_line { 'Allow normal user login':
-    path   => '/etc/master.passwd',
-    line   => '+:::::::::',
-    notify => Exec['Update /etc/passwd'],
-  }
-  exec { 'Update /etc/passwd':
-    command     => '/usr/sbin/pwd_mkdb -p /etc/master.passwd',
-    refreshonly => true,
-  }
-
-
   file { '/etc/krb5.conf':
     ensure => file,
     source => 'puppet:///modules/freebsd/ldap/krb5.conf',

manifests/ldap/root.pp

+class freebsd::ldap::root {
+  file_line { 'Allow normal user login':
+    path   => '/etc/master.passwd',
+    line   => '+@root::::::::/var/empty:/bin/tcsh',
+    notify => Exec['Update /etc/passwd'],
+  }
+  file_line { 'Allow normal user login':
+    path   => '/etc/master.passwd',
+    line   => '+:::::::::',
+    notify => Exec['Update /etc/passwd'],
+  }
+  exec { 'Update /etc/passwd':
+    command     => '/usr/sbin/pwd_mkdb -p /etc/master.passwd',
+    refreshonly => true,
+  }
+}

manifests/ldap/user.pp

+class freebsd::ldap::user {
+  file_line { 'Allow normal user login':
+    path   => '/etc/master.passwd',
+    line   => '+:::::::::',
+    notify => Exec['Update /etc/passwd'],
+  }
+  exec { 'Update /etc/passwd':
+    command     => '/usr/sbin/pwd_mkdb -p /etc/master.passwd',
+    refreshonly => true,
+  }
+}