Skip to content

Latest commit

 

History

History
79 lines (58 loc) · 2 KB

README.markdown

File metadata and controls

79 lines (58 loc) · 2 KB
Raw

ssh puppet module

Build Status

This is the ssh module. It manage client and server configurations. It supports:

  • Any global sshd_config and ssh_config options
  • Match block defines to confine users, group, etc to a shell, a chroot, or an configuration options you can think of.

The following options are set in the default server options parameter

  • AuthorizedKeysFile => .ssh/authorized_keys
  • UsePAM => yes
  • Subsystem => sftp internal-sftp
  • PasswordAuthentication => yes
  • ChallengeResponseAuthentication => no
  • GSSAPIAuthentication => yes
  • GSSAPICleanupCredentials => yes
  • X11Forwarding => yes

The following options are set in the default client options parameter

  • ForwardX11Trusted => yes
  • GSSAPIAuthentication => yes

ssh::config have a config_template parameter to change the template file.

Requirements

  • puppetlabs/stdlib >= 3.0.0
  • puppetlabs/concat >= 1.1.2
  • facter >= 1.7.3
  • puppet 3.x (This bug prevent puppet 4.x support)

OS

  • RedHat and Debian OS family are supported.

License

Apache License, Version 2.0

Usage

class { 'ssh':
  serveroptions => {
    'PasswordAuthentication' => 'no',
  }
}

ssh::match { 'sftpusers':
  type                => 'group',
  options             => {
    'X11Forwarding'      => 'no',
    'AllowTCPForwarding' => 'no',
    'GatewayPorts'       => 'no',
    'ForceCommand'       => 'internal-sftp',
    'ChrootDirectory'    => '/srv/www/%u',
  },
}

Tests

To run tests, you'll need

  • rake
  • rspec_puppet
  • puppetlabs_spec_helper
  • puppet_spec_facts
  • puppet-blacksmith

Run rake help to see all targets, rake spec to run tests.

Contact

Simon Piette [email protected]

Support

Please log tickets and issues at our github page