From f80e765fca9c1c806b2168d816e6b0b66027e444 Mon Sep 17 00:00:00 2001
From: Trey Dockendorf <tdockendorf@osc.edu>
Date: Sat, 6 Mar 2021 10:32:50 -0500
Subject: [PATCH] Fix use of Sensitive on unless parameter for
 postgresql::server::role

---
 manifests/server/role.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/server/role.pp b/manifests/server/role.pp
index 0ef4651531..d56e008d13 100644
--- a/manifests/server/role.pp
+++ b/manifests/server/role.pp
@@ -133,7 +133,7 @@
       }
       postgresql_psql { "ALTER ROLE ${username} ENCRYPTED PASSWORD ****":
         command     => Sensitive("ALTER ROLE \"${username}\" ${password_sql}"),
-        unless      => Sensitive("SELECT 1 FROM pg_shadow WHERE usename = '${username}' AND passwd = '${pwd_hash_sql}'"),
+        unless      => "SELECT 1 FROM pg_shadow WHERE usename = '${username}' AND passwd = '${pwd_hash_sql}'",
         sensitive   => true,
       }
     }