first step to put ssh and sshd together
git-svn-id: https://svn/ipuppet/trunk/modules/sshd@820 d66ca3ae-40d7-4aa7-90d4-87d79ca94279
This commit is contained in:
parent
d6c091a541
commit
86b9637755
1 changed files with 42 additions and 1 deletions
|
@ -46,13 +46,17 @@ class sshd {
|
||||||
|
|
||||||
define sshd::sshd_config (
|
define sshd::sshd_config (
|
||||||
$source = "",
|
$source = "",
|
||||||
$allowed_users = 'root'
|
|
||||||
){
|
){
|
||||||
$real_source = $source ? {
|
$real_source = $source ? {
|
||||||
'' => "${operatingsystem}_normal.erb",
|
'' => "${operatingsystem}_normal.erb",
|
||||||
default => $source,
|
default => $source,
|
||||||
}
|
}
|
||||||
|
|
||||||
|
$real_allowed_users = ? $sshd_allowed_users ? {
|
||||||
|
'' => 'root',
|
||||||
|
default => $sshd_allowed_users,
|
||||||
|
}
|
||||||
|
|
||||||
file { 'sshd_config':
|
file { 'sshd_config':
|
||||||
path => '/etc/ssh/sshd_config',
|
path => '/etc/ssh/sshd_config',
|
||||||
owner => root,
|
owner => root,
|
||||||
|
@ -65,3 +69,40 @@ define sshd::sshd_config (
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
define sshd::deploy_auth_key(
|
||||||
|
$source => '',
|
||||||
|
$user = 'root',
|
||||||
|
$target_dir = '/root/.ssh/',
|
||||||
|
$group = '' ) {
|
||||||
|
|
||||||
|
$real_target = $target_dir ? {
|
||||||
|
'' => "/home/$user/.ssh/",
|
||||||
|
default => $target_dir,
|
||||||
|
}
|
||||||
|
|
||||||
|
$real_group = $group ? {
|
||||||
|
'' => 0,
|
||||||
|
default => $group,
|
||||||
|
}
|
||||||
|
|
||||||
|
$real_source = $source ? {
|
||||||
|
'' => "sshd/authorized_keys/${name}",
|
||||||
|
default => $source,
|
||||||
|
}
|
||||||
|
|
||||||
|
file {$real_target:
|
||||||
|
ensure => directory,
|
||||||
|
owner => $user,
|
||||||
|
group => $real_group,
|
||||||
|
mode => 700,
|
||||||
|
}
|
||||||
|
|
||||||
|
file {"authorized_keys_${user}":
|
||||||
|
path => "$real_target/authorized_keys",
|
||||||
|
owner => $user,
|
||||||
|
group => $real_group,
|
||||||
|
mode => 600,
|
||||||
|
source => "puppet://$server/$source",
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
Loading…
Reference in a new issue