102 Commits

Author SHA1 Message Date
Garrett Honeycutt
9aef32a235
Document support for Puppet 6 2019-02-28 14:40:40 -05:00
Asif Maqbool
1c0d3f6bdb Add RevokedKeys option to sshd_config
Co-authored-by: Garrett Honeycutt <code@garretthoneycutt.com>
2018-10-08 15:38:54 -04:00
Zachary Yamada
d8ed53d507 Fixed typo in readme which provided the incorrect parameter for configuring the sshd PrintLastLog option 2018-03-28 13:03:45 -07:00
Garrett Honeycutt
3d3121a183
Merge pull request #257 from baurmatt/AuthenticationMethods
Add sshd_config_authenticationmethods parameter
2017-12-10 20:59:25 -05:00
e.vanhazendonk
2ca1bdfcca Add support for AllowAgentForwarding option in sshd_config 2017-12-10 19:27:35 -05:00
Matthias Baur
bc4c8a82a6 Add sshd_config_authenticationmethods parameter
This commit adds support for AuthenticationMethods by adding the
sshd_config_authenticationmethods parameter. Credits to @Saford91 for
the first implementation.
2017-12-10 20:29:02 +01:00
Garrett Honeycutt
9a349c7431
Merge pull request #252 from ghoneycutt/fix_sshd_config_maxstartups
(GH-251) Fix regex for sshd_config_maxstartups
2017-11-20 10:46:02 -05:00
Garrett Honeycutt
fcc08ace1b (ci) Stop testing on minor releases 2017-11-20 09:52:51 -05:00
Garrett Honeycutt
cc2d310436 (GH-251) Fix regex for sshd_config_maxstartups 2017-11-20 09:44:17 -05:00
Phil Friderici
1cc9edea3a Add config_entries parameter
Uses create_resources() to create ssh::config_entry resources for the given hash.
Does respect hiera_merge parameter accordingly.
2017-09-21 13:17:52 +00:00
Jeff McCune
68dd872428 Add ssh::config_entry defined type
This patch adds a mechanism to manage ~/.ssh/config entries using the
concat module.
2017-09-15 13:33:58 -04:00
David Hollinger
6f68aa6aba Update README 2017-07-24 15:04:37 -05:00
David Hollinger
50ddf070ed Update README 2017-07-24 13:42:13 -05:00
Garrett Honeycutt
9c269790a6 Support Puppet 5 2017-07-24 14:02:44 -04:00
Garrett Honeycutt
a552656834 Support only latest Puppet v3 and later versions of Puppet v4 2017-07-24 13:53:05 -04:00
Garrett Honeycutt
140baa1942 Do not test with ruby 2.3.1 as Puppet 4 never supported it 2017-07-24 13:48:03 -04:00
Mears148
5368e52b30 Add PrintLastLog, UsePrivilegeSeparation, and Compression 2017-05-26 13:27:16 -04:00
Garrett Honeycutt
84f0078a32 Allow sshd_config_trustedusercakeys to be 'none' as per the docs 2017-05-17 10:51:46 -04:00
David Hollinger
b67aefd3c4 Add support for HostCertificate and TrustedUserCAKeys settings in sshd_config 2017-05-17 10:47:04 -04:00
Martin Narkiewicz
4cf16192a5 Add support for PubkeyAcceptedKeyTypes option to sshd_config 2017-03-16 10:48:13 -07:00
Phil Friderici
b476a3f725 Enhance compatibility with Solaris
Some OpenSSH parameters are not compatible with Solaris SSH.
They do break if they are included into the configuration file(s).

This patch does not include them by default on Solaris anymore.

Changed parameters:
sshd_config_tcp_keepalive   (TCPKeepAlive in sshd_config)
sshd_config_permittunnel    (PermitTunnel in sshd_config)
sshd_config_maxsessions     (MaxSessions  in sshd_config)
ssh_config_hash_known_hosts (HashKnownHosts in ssh_config)
2017-02-27 09:10:12 +01:00
Garrett Honeycutt
6c1beba7fb Document ChallengeResponseAuthentication on EL systems 2016-10-28 11:50:32 -04:00
Garrett Honeycutt
00829437ba Merge pull request #186 from andrei693/Expose_PermitTunnel_from_sshd_config
Expose PermitTunnel from sshd_config
2016-10-25 11:25:37 -04:00
Andrei Brezan
e044e4c89f Expose PermitTunnel from sshd_config 2016-10-24 17:18:25 +02:00
Michael LoSapio
64008a427f Add support for ProxyCommand in ssh_config 2016-10-20 16:04:15 -04:00
43d6107949 adding support for KexAlgorithms 2016-10-19 14:01:24 -07:00
Bosse Andersson
f41d7966ab Add configurable param X11UseLocalhost to sshd_config 2016-10-04 12:55:06 +02:00
Garrett Honeycutt
d13c324001 Add support for Ubuntu 16.04 LTS 2016-08-28 20:55:00 -04:00
Andrei Brezan
d68ebec55d Expose TCPKeepAlive from sshd_config 2016-08-18 10:24:41 +02:00
Garrett Honeycutt
aafdb89eb5 Support Ruby v2.3.1 2016-08-08 20:30:53 -04:00
jthiesfeld
cb09aedee6 Adding two new options for sshd_config PermitEmptyPasswords and
PermitUserEnvironment
2016-06-21 15:52:55 -05:00
Garrett Honeycutt
ab88a5e86f Working with sergiik to improve documentation of new params 2016-06-20 12:38:24 -04:00
Sergii Kipot
0d936a954c Add support for multiple files in GlobalKnownHostsFile ssh option
Array option ssh_config_global_known_hosts_list implemented
2016-06-15 20:36:58 +02:00
Sergii Kipot
5be19cd1d7 Add support for UserKnownHostsFile ssh option
Array option ssh_config_user_known_hosts_file implemented
2016-06-15 17:52:53 +02:00
Garrett Honeycutt
6e920cab49 Merge pull request #162 from andrei693/Add_multiple_ports_option_to_sshd_config_port
Change sshd_config_port to support multiple port numbers
2016-06-09 16:47:25 -04:00
Andrei Brezan
1c78f1e732 Change sshd_config_port to support multiple port numbers, string/integer/array 2016-06-09 12:41:12 +02:00
Florian Faltermeier
49c799afb3 add support for PubkeyAuthentication in sshd_config 2016-06-08 15:25:24 +02:00
Florian Faltermeier
a7a15c203e allow ecdsa-sha2-nistp256 hostkeys 2016-06-07 09:15:06 +02:00
jthiesfeld
e1841e04d8 Add param to manage MaxAuthTries in sshd_config 2016-06-06 12:49:20 -04:00
Garrett Honeycutt
88f857d6b6 Work with apazga on adding config options for ssh_config 2016-06-04 10:42:02 -04:00
Abel Paz
b48e066f21 Additional parameters for ssh_config
To allow the following options to be configured in ssh_config
* StrictHostKeyChecking
* EnableSSHKeysign
* HostbasedAuthentication for ssh_client
2016-06-04 10:36:17 -04:00
Anders Larsson
98382a05ff Refactor spec tests 2016-02-24 12:01:30 +01:00
Garrett Honeycutt
dd970dbaa5 Add CVE-2016-0777 and CVE-2016-0778 information to README 2016-01-17 13:12:26 -05:00
Phil Friderici
38260e68c4 Set UseRoaming parameter only on Linux clients
- add variable validation
- add tests
2016-01-15 15:16:09 +01:00
Tom De Vylder
8876844637 Add parameter sshd_addressfamily 2015-12-10 09:59:19 -05:00
Garrett Honeycutt
73a0d2ba35 Change formatting in README to be explicit about example types
This makes the markup render nicely on GitHub
2015-12-07 15:07:06 -05:00
Garrett Honeycutt
e3246a616a Update README to meet criteria for Puppet Labs Approved status 2015-11-24 13:53:08 -05:00
Daniel Fairhurst
e67cea8e24 Add a parameter to allow disabling management of the ssh service 2015-10-15 13:13:11 -04:00
Phil Friderici
45ef1ddbaa add default SFTP subsystem for SLES12 2015-10-07 15:28:54 +02:00
Garrett Honeycutt
b434ea89ef Support Puppet v4 and v3 with future parser 2015-08-05 11:01:02 -04:00