Switch to a new KDF

[dsa-puppet.git] / modules / bacula / manifests / init.pp

diff --git a/modules/bacula/manifests/init.pp b/modules/bacula/manifests/init.pp
index ba15e6cec5f48275dbb696b4b427b1e0865ad46b..bf2ed30d060c739dfff4b425c440911a6cbbc002 100644 (file)
--- a/modules/bacula/manifests/init.pp
+++ b/modules/bacula/manifests/init.pp
@@ -22,9 +22,9 @@ class bacula {
 
        $bacula_backup_path       = '/srv/bacula'
 
-       $bacula_director_secret   = hmac('/etc/puppet/secret', "bacula-dir-${::hostname}")
-       $bacula_db_secret         = hmac('/etc/puppet/secret', "bacula-db-${::hostname}")
-       $bacula_storage_secret    = hmac('/etc/puppet/secret', "bacula-sd-${bacula_storage_name}")
-       $bacula_client_secret     = hmac('/etc/puppet/secret', "bacula-fd-${::fqdn}")
-       $bacula_monitor_secret    = hmac('/etc/puppet/secret', "bacula-monitor-${bacula_director_name}")
+       $bacula_director_secret   = hkdf('/etc/puppet/secret', "bacula-dir-${::hostname}")
+       $bacula_db_secret         = hkdf('/etc/puppet/secret', "bacula-db-${::hostname}")
+       $bacula_storage_secret    = hkdf('/etc/puppet/secret', "bacula-sd-${bacula_storage_name}")
+       $bacula_client_secret     = hkdf('/etc/puppet/secret', "bacula-fd-${::fqdn}")
+       $bacula_monitor_secret    = hkdf('/etc/puppet/secret', "bacula-monitor-${bacula_director_name}")
 }