first step to put ssh and sshd together
git-svn-id: https://svn/ipuppet/trunk/modules/sshd@820 d66ca3ae-40d7-4aa7-90d4-87d79ca94279
This commit is contained in:
parent
d6c091a541
commit
86b9637755
1 changed files with 42 additions and 1 deletions
|
@ -46,13 +46,17 @@ class sshd {
|
|||
|
||||
define sshd::sshd_config (
|
||||
$source = "",
|
||||
$allowed_users = 'root'
|
||||
){
|
||||
$real_source = $source ? {
|
||||
'' => "${operatingsystem}_normal.erb",
|
||||
default => $source,
|
||||
}
|
||||
|
||||
$real_allowed_users = ? $sshd_allowed_users ? {
|
||||
'' => 'root',
|
||||
default => $sshd_allowed_users,
|
||||
}
|
||||
|
||||
file { 'sshd_config':
|
||||
path => '/etc/ssh/sshd_config',
|
||||
owner => root,
|
||||
|
@ -65,3 +69,40 @@ define sshd::sshd_config (
|
|||
},
|
||||
}
|
||||
}
|
||||
|
||||
define sshd::deploy_auth_key(
|
||||
$source => '',
|
||||
$user = 'root',
|
||||
$target_dir = '/root/.ssh/',
|
||||
$group = '' ) {
|
||||
|
||||
$real_target = $target_dir ? {
|
||||
'' => "/home/$user/.ssh/",
|
||||
default => $target_dir,
|
||||
}
|
||||
|
||||
$real_group = $group ? {
|
||||
'' => 0,
|
||||
default => $group,
|
||||
}
|
||||
|
||||
$real_source = $source ? {
|
||||
'' => "sshd/authorized_keys/${name}",
|
||||
default => $source,
|
||||
}
|
||||
|
||||
file {$real_target:
|
||||
ensure => directory,
|
||||
owner => $user,
|
||||
group => $real_group,
|
||||
mode => 700,
|
||||
}
|
||||
|
||||
file {"authorized_keys_${user}":
|
||||
path => "$real_target/authorized_keys",
|
||||
owner => $user,
|
||||
group => $real_group,
|
||||
mode => 600,
|
||||
source => "puppet://$server/$source",
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue