5cf8ea7bd7
git-svn-id: https://svn/ipuppet/trunk/modules/sshd@886 d66ca3ae-40d7-4aa7-90d4-87d79ca94279
110 lines
2.7 KiB
Puppet
110 lines
2.7 KiB
Puppet
# modules/ssh/manifests/init.pp - manage ssh stuff
|
|
# Copyright (C) 2007 admin@immerda.ch
|
|
#
|
|
|
|
#modules_dir { "sshd": }
|
|
|
|
class sshd {
|
|
|
|
case $operatingsystem {
|
|
OpenBSD: {
|
|
exec{sshd_refresh:
|
|
command => "/bin/kill -HUP `/bin/cat /var/run/sshd.pid`",
|
|
refreshonly => true,
|
|
}
|
|
}
|
|
default: {
|
|
service{'sshd':
|
|
name => $operatingsystem ? {
|
|
debian => 'ssh',
|
|
ubuntu => 'ssh',
|
|
default => 'sshd',
|
|
},
|
|
enable => true,
|
|
ensure => running,
|
|
require => Package[openssh],
|
|
}
|
|
|
|
package{openssh:
|
|
name => $operatingsystem ? {
|
|
debian => 'openssh-server',
|
|
ubuntu => 'openssh-server',
|
|
redhat => 'openssh-server',
|
|
centos => 'openssh-server',
|
|
default => 'openssh',
|
|
},
|
|
category => $operatingsystem ? {
|
|
gentoo => 'net-misc',
|
|
default => '',
|
|
},
|
|
ensure => present,
|
|
}
|
|
|
|
}
|
|
}
|
|
}
|
|
|
|
define sshd::sshd_config(
|
|
$source = ''
|
|
){
|
|
$real_source = $source ? {
|
|
'' => "${operatingsystem}_normal.erb",
|
|
default => $source,
|
|
}
|
|
|
|
info("sshd_allowed_users is set to ${sshd_allowed_users}")
|
|
|
|
$real_sshd_allowed_users = $sshd_allowed_users ? {
|
|
'' => 'root',
|
|
default => $sshd_allowed_users,
|
|
}
|
|
|
|
file { 'sshd_config':
|
|
path => '/etc/ssh/sshd_config',
|
|
owner => root,
|
|
group => 0,
|
|
mode => 600,
|
|
content => template("sshd/sshd_config/${real_source}"),
|
|
notify => $operatingsystem ? {
|
|
openbsd => Exec[sshd_refresh],
|
|
default => Service[sshd],
|
|
},
|
|
}
|
|
}
|
|
|
|
define sshd::deploy_auth_key(
|
|
$source = '',
|
|
$user = 'root',
|
|
$target_dir = '/root/.ssh/',
|
|
$group = '' ) {
|
|
|
|
$real_target = $target_dir ? {
|
|
'' => "/home/$user/.ssh/",
|
|
default => $target_dir,
|
|
}
|
|
|
|
$real_group = $group ? {
|
|
'' => 0,
|
|
default => $group,
|
|
}
|
|
|
|
$real_source = $source ? {
|
|
'' => "sshd/authorized_keys/${name}",
|
|
default => $source,
|
|
}
|
|
|
|
file {$real_target:
|
|
ensure => directory,
|
|
owner => $user,
|
|
group => $real_group,
|
|
mode => 700,
|
|
}
|
|
|
|
file {"authorized_keys_${user}":
|
|
path => "$real_target/authorized_keys",
|
|
owner => $user,
|
|
group => $real_group,
|
|
mode => 600,
|
|
source => "puppet://$server/$source",
|
|
}
|
|
}
|