updated readme.md about ssh authentication, added examples for debian in debian.md

2 files changed, 41 insertions, 2 deletions

diff --git a/README.md b/README.md
index f3d5e44..440b471 100644
--- a/README.md
+++ b/README.md
@@ -140,10 +140,14 @@ Only required if a filestore is used.
 *workspace*: The directory to use to store files used during installation.
 Default: '/root/check_mk'
 
-*use_ssh*: Use ssh instead of the tcp wrapper. Deploys ssh keypair on server and 
-           allows the server to execute the agent on the client.
+*use_ssh*: Use ssh instead of the tcp wrapper in order to allows the server to 
+           execute the agent on the client.
            Default: false.
 
+           * Deploys ssh keypair on server (in /opt/omd/sites/monitoring/.ssh)
+           * Saves keypair on puppetmaster (/etc/puppet/modules/keys/files/check_mk_keys by default)
+           * Deploys public key on client in /root/.ssh/authorized_keys (restricting allows command to "/usr/bin/check_mk_agent")
+
 ## Host groups and tags
 
 By default check_mk puts all hosts into a group called 'check_mk' but where you
diff --git a/debian.md b/debian.md
new file mode 100644
index 0000000..96d32a4
--- /dev/null
+++ b/debian.md
@@ -0,0 +1,35 @@
+Examples for using this check_mk repository on debian
+=====================================================
+
+What it does
+============
+
+* ssh authentication is configured to allow the server to execute check_mk on the client
+* omd is installed on the server
+* check_mk is installed as package on the client
+
+On the client
+=============
+
+    class site_check_mk::client {
+      class { 'check_mk::agent':
+        agent_package_name          => 'check-mk-agent',
+        agent_logwatch_package_name => 'check-mk-agent-logwatch',
+        use_ssh                     => true,
+        register_agent              => false
+      }
+    }
+
+
+On the server
+=============
+
+    include check_mk::omd_repo
+    class { 'check_mk':
+      package           => 'omd',
+      omd_service_name  => 'omd-1.00',
+      http_service_name => 'apache2',
+      omdadmin_htpasswd => trocla("${::fqdn}_omdadmin"),
+      use_ssh           => true;
+    }
+