cdist/conf/type/__openldap_server/manifest

@@ -19,7 +19,7 @@ CONF_OWNER="root"
 CONF_GROUP="root"
 case "${os}" in
     freebsd)
-        PKGS="openldap-server"
+        PKGS="openldap26-server"
         ETC="/usr/local/etc"
         SLAPD_DIR="/usr/local/etc/openldap"
         SLAPD_DATA_DIR="/var/db/openldap-data"
@@ -197,12 +197,12 @@ if [ -z "${_skip_letsencrypt_cert}" ]; then
         staging=""
     fi
 
+    __directory "${SLAPD_DIR}/sasl2"
     # shellcheck disable=SC2086
-    __directory ${SLAPD_DIR}/sasl2
     require="__directory/${SLAPD_DIR}/sasl2" __letsencrypt_cert "${name}" \
         --admin-email "${admin_email}" \
         --renew-hook "cp ${ETC}/letsencrypt/live/${name}/*.pem ${SLAPD_DIR}/sasl2 && chown -R ${CONF_OWNER}:${CONF_GROUP} ${SLAPD_DIR}/sasl2 && service slapd restart" \
-        --automatic-renewal "${staging}"
+        --automatic-renewal ${staging}
 fi
 
 require="__package/${PKG_MAIN}" __directory ${SLAPD_DIR}/slapd.d --state absent

cdist/conf/type/__openldap_server/parameter/default/schema

@@ -8,5 +8,4 @@ java
 misc
 nis
 openldap
-ppolicy
 collective

cdist/conf/type/__postgres_role/man.rst

@@ -27,10 +27,19 @@ All parameter map directly to the corresponding postgres createrole
 parameters.
 
 login
+    Allow the created user to log into the database.
+
 createdb
+    Automatically creates a database for the role just created.
+
 createrole
+    Allows the new role to create new roles.
+
 superuser
+    The new role has superuser privileges.
+
 inherit
+    Allows the new role to inherit privileges from another user.
 
 EXAMPLES
 --------
@@ -41,6 +50,9 @@ EXAMPLES
 
     __postgres_role myrole --password 'secret'
 
+    # Without the parameter `--login` the role won't have login privileges
+    __postgres_role myrole --password 'secret' --login
+
     __postgres_role admin --password 'very-secret' --superuser
 
     __postgres_role dbcustomer --password 'bla' --createdb