89 Commits

Author SHA1 Message Date
Abel Paz
b48e066f21 Additional parameters for ssh_config
To allow the following options to be configured in ssh_config
* StrictHostKeyChecking
* EnableSSHKeysign
* HostbasedAuthentication for ssh_client
2016-06-04 10:36:17 -04:00
Phil Friderici
bbdb6d4f5e Enhance Puppet v4 compatibility 2016-02-24 12:02:22 +01:00
Anders Larsson
32bdfdd20d Add UseRoaming only on supported ssh versions
Facts ssh_version and ssh_version_numeric is now used in the decision of
including UseRoaming in ssh_version.
2016-02-23 11:58:48 +01:00
Phil Friderici
38260e68c4 Set UseRoaming parameter only on Linux clients
- add variable validation
- add tests
2016-01-15 15:16:09 +01:00
Michael Merideth
7da166afb8 mitigate client bugs CVE-2016-0777 and CVE-2016-0778 2016-01-14 14:31:12 -07:00
Garrett Honeycutt
32c633f5a5 Use community puppet-lint plugins and conform code to them 2015-12-15 16:10:04 -05:00
Tom De Vylder
8876844637 Add parameter sshd_addressfamily 2015-12-10 09:59:19 -05:00
Daniel Fairhurst
e67cea8e24 Add a parameter to allow disabling management of the ssh service 2015-10-15 13:13:11 -04:00
Phil Friderici
45ef1ddbaa add default SFTP subsystem for SLES12 2015-10-07 15:28:54 +02:00
Roy Williams
e649f71ef9 Add support for KerberosAuthentication option in sshd. 2015-09-03 15:01:30 -04:00
Phil Friderici (ephifre)
0de49e43f7 fix for hiera_array() always returning an empty array 2015-08-11 13:35:42 +02:00
Garrett Honeycutt
f029af828b Change type() to type3x() for Puppet v4 compatibility 2015-08-05 11:28:30 -04:00
Phil Friderici (ephifre)
13e7433e0b Fix failing spec tests and get Puppet v4 working 2015-08-05 11:02:11 -04:00
Garrett Honeycutt
b434ea89ef Support Puppet v4 and v3 with future parser 2015-08-05 11:01:02 -04:00
kTitan
6d0cfd48c8 Parameterize IgnoreUserKnownHosts & IgnoreRhosts 2015-06-01 21:50:46 +02:00
kTitan
ea036f117e Add parameter for HostbasedAuthentication option in sshd_config 2015-06-01 10:58:25 -04:00
Garrett Honeycutt
ab8d700a6a Fix style issues 2015-05-31 15:27:43 -04:00
Kyle Fu
20bb5118df Remove if statement for sshd_gssapiauthentication. 2015-05-07 14:45:09 +08:00
Kyle Fu
29c042a960 Remove if for ssh_gssapiauthentication. Remove unnecessary line in spec_helper.rb. Fix dot by backslash. 2015-05-07 11:19:40 +08:00
Kyle Fu
fbe72409ff Make GSSAPIAuthentication in ssh_config modifiable. Fix corresponding Puppet::Error test code. 2015-05-04 11:00:11 +08:00
Garrett Honeycutt
c105d91d4e Add parameters for AuthorizedKeysCommand and AuthorizedKeysCommandUser 2015-04-13 17:01:45 -04:00
Garrett Honeycutt
80f77a2000 Work with Phil on PR
Numbers are treated as strings, so removed those from the test.
Simplified validation of sshd_config_forcecommand to simply check if it
is a string.
2015-04-07 13:55:49 -04:00
Phil Friderici (ephifre)
ffde12030c parameterize sftp_server related settings 2015-04-07 18:32:01 +02:00
Garrett Honeycutt
a8be0466dc Always manage ssh_known_hosts and add spec tests 2014-11-16 16:47:44 -08:00
Markus Frosch
a03df37f09 Manage the ssh_known_hosts file when ssh_key_import is used 2014-11-16 16:47:44 -08:00
Garrett Honeycutt
d462f6f0b2 Improve validation of sshd_config_maxstartups and add spec tests 2014-11-13 01:46:53 -08:00
Kalle Kiviaho
6d6fe4c030 Add support for MaxStartups and MaxSessions in sshd_config
MaxStartups and MaxSessions control how many connections can be made to a ssh server.
Corrected faulty commented value for MaxStartups.
2014-11-12 16:03:08 -08:00
Garrett Honeycutt
8fbbdc7d3d Add ability to specify ListenAddress in sshd_config 2014-10-25 13:52:05 -07:00
Markus Frosch
445981f9af Add sshd_listen parameter for ListenAddress 2014-10-25 21:48:13 +02:00
Garrett Honeycutt
aeddcdceff Style fix - no functional changes 2014-10-21 11:50:00 -04:00
Garrett Honeycutt
fadfa3b3bc Merge pull request #85 from diddi-/sshd_hostkey
Add support for changing HostKey option in sshd_config
2014-10-21 11:49:05 -04:00
Garrett Honeycutt
114bbccadb Release v3.19.1 - Bugfix: default GSSAPIDelegateCredentials to undef
This was previously set to undef everywhere except Solaris 11 which was
set incorrectly to 'yes'.
2014-09-24 10:13:56 -04:00
Roy Victor Williams
ab37372230 Add support for GSSAPIDelegateCredentials in ssh_config.
By default this only applies to Solaris 11.
2014-09-23 16:52:34 -04:00
Diddi Oscarsson
2dfe01c0e3 Add support for changing HostKey option
This is to make it possible to change the HostKey parameter in
sshd_config.

As the HostKey is hardcoded to the template now it is currently not
possible to connect using for example ssh-dss. This commit changes that
behaviour.
2014-09-02 13:41:46 +02:00
Wolf Noble
dbd0e51760 Add parameters to specify the template used to generate sshd_config and ssh_config 2014-08-12 14:47:58 -05:00
Garrett Honeycutt
bf53e2f36e Fixup gmcgrath's contribution to comply with style 2014-08-09 10:39:25 -04:00
gmcgrath
ec91c40a5a Ability to use hiera_array for sshd_config's deny/allow users 2014-08-09 10:38:44 -04:00
Wolf Noble
71dfbca914 permit customization of sshd config loglevel 2014-08-06 15:13:32 -05:00
Mark Nalyanya
e52bad15e1 Update Solaris 11 package names 2014-06-10 13:48:53 -04:00
Garrett Honeycutt
3f94bff707 Add Allow/Deny options to sshd_config
Add ability to specify DenyGroups, AllowGroups, and AllowUsers to
sshd_config.
2014-05-29 11:17:18 -04:00
Garrett Honeycutt
eef1ca3f73 Add ability to specify DenyUsers in sshd_config 2014-05-28 16:46:13 -04:00
Garrett Honeycutt
230023ef5a Add ability to specify MACs option in ssh_config and sshd_config 2014-05-28 14:57:35 -04:00
Garrett Honeycutt
dbf2d6c138 Add ability to specify Ciphers option in ssh_config and sshd_config 2014-05-28 14:12:44 -04:00
nbentoumi
05704d7280 Add ServerKeyBits parameter 2014-05-22 14:52:23 -04:00
root
0d00d040da Add StrictModes parameter for sshd 2014-05-20 13:04:51 -04:00
Martin Hagstrom
7dd6b653b0 Add option to specify AuthorizedKeysFile 2014-05-16 13:01:27 +02:00
Garrett Honeycutt
58dd6263e7 Merging emahags/import_ssh_keys into master 2014-04-14 01:24:08 -04:00
Mike Lehner
9792b269bd Added ClientAliveCountMax config parameter 2014-04-01 20:34:37 -04:00
Garrett Honeycutt
b3c2cd7886 Fix Mark's commit to support Solaris 9 2014-02-28 18:43:17 -05:00
Mark Nalyanya
0523bac29a Fix service hasstatus for Solaris 9 2014-02-28 17:43:39 -05:00