ssh puppet module

This is the ssh module. It manage client and server configurations. It supports:

• Any global sshd_config and ssh_config options
• Match block defines to confine users, group, etc to a shell, a chroot, or an configuration options you can think of.

The following options are set in the default server options parameter

• AuthorizedKeysFile => .ssh/authorized_keys
• UsePAM => yes
• Subsystem => sftp internal-sftp
• PasswordAuthentication => yes
• ChallengeResponseAuthentication => no
• GSSAPIAuthentication => yes
• GSSAPICleanupCredentials => yes
• X11Forwarding => yes

The following options are set in the default client options parameter

• ForwardX11Trusted => yes
• GSSAPIAuthentication => yes

ssh::config have a config_template parameter to change the template file.

Requirements

• puppetlabs/stdlib >= 3.0.0
• puppetlabs/concat >= 1.1.2
• facter >= 1.7.3
• puppet 3.x (This bug prevent puppet 4.x support)

OS

• RedHat and Debian OS family are supported.

License

Apache License, Version 2.0

Usage

class { 'ssh':
  serveroptions => {
    'PasswordAuthentication' => 'no',
  }
}

ssh::match { 'sftpusers':
  type                => 'group',
  options             => {
    'X11Forwarding'      => 'no',
    'AllowTCPForwarding' => 'no',
    'GatewayPorts'       => 'no',
    'ForceCommand'       => 'internal-sftp',
    'ChrootDirectory'    => '/srv/www/%u',
  },
}

Tests

To run tests, you'll need

• rake
• rspec_puppet
• puppetlabs_spec_helper
• puppet_spec_facts
• puppet-blacksmith

Run rake help to see all targets, rake spec to run tests.

Contact

Simon Piette [email protected]

Support

Please log tickets and issues at our github page