opuppet/module-sshd
5
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

FreeBSD: Use variables for the Kerberos options

Browse source 
Signed-off-by: Gabriel Filion <lelutin@gmail.com>
This commit is contained in:
Gabriel Filion 2011-02-21 15:18:14 -05:00
parent 5dd814871a
commit 95bf6e032b
1 changed files with 25 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
templates/sshd_config/FreeBSD.erb
View file

@ -130,14 +130,33 @@ ChallengeResponseAuthentication no
<%- end -%> <%- end -%>
# Kerberos options # Kerberos options
#KerberosAuthentication no <%- if sshd_kerberos_authentication.to_s == 'yes' then -%>
#KerberosOrLocalPasswd yes KerberosAuthentication yes
#KerberosTicketCleanup yes <%- else -%>
#KerberosGetAFSToken no KerberosAuthentication no
<%- end -%>
<%- if sshd_kerberos_orlocalpasswd.to_s == 'yes' then -%>
KerberosOrLocalPasswd yes
<%- else -%>
KerberosOrLocalPasswd no
<%- end -%>
<%- if sshd_kerberos_ticketcleanup.to_s == 'yes' then -%>
KerberosTicketCleanup yes
<%- else -%>
KerberosTicketCleanup no
<%- end -%>
# GSSAPI options # GSSAPI options
#GSSAPIAuthentication no <%- if sshd_gssapi_authentication.to_s == 'yes' then -%>
#GSSAPICleanupCredentials yes GSSAPIAuthentication yes
<%- else -%>
GSSAPIAuthentication no
<%- end -%>
<%- if sshd_gssapi_authentication.to_s == 'yes' then -%>
GSSAPICleanupCredentials yes
<%- else -%>
GSSAPICleanupCredentials yes
<%- end -%>
# Set this to 'no' to disable PAM authentication, account processing, # Set this to 'no' to disable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will # and session processing. If this is enabled, PAM authentication will