summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-02-23Adding sshd_use_strong_ciphers to all sshd_config templatesSilvio Rhatto
2011-02-23Changing parameter name sshd_perfect_forward_secrecy to ↵Silvio Rhatto
sshd_use_strong_ciphers as sshd already does PFS
2011-02-19Updating lucid template with new ssh port schemeSilvio Rhatto
2011-02-19Merge branch 'master' of git://labs.riseup.net/shared-sshdSilvio Rhatto
Conflicts: templates/sshd_config/Debian_squeeze.erb
2011-02-19Update README to include the ssh_keygen functionMicah Anderson
2011-02-19Pull together a more comprehensive README, moving the configurable variables ↵Micah Anderson
from init.pp into the README, and detailing the other features, and requirements, of the module
2011-02-14Merge remote branch 'shared/master'intrigeri
Conflicts: templates/sshd_config/Debian_squeeze.erb I always picked the shared repository version when conflicts arose. The only exception to this rule was: I kept my branch's "HostbasedUsesNameFromPacketOnly yes" in order to be consistent with existing Etch and Lenny templates. This is not the default Debian setting, but I would find it weird if a host had this setting changed by Puppet after upgrading to Squeeze. The right way to proceed would probably be to make this configurable.
2011-02-14Merge remote branch 'immerda/master'intrigeri
2011-02-13Perfect forward secrecy config at squeeze templateSilvio Rhatto
2011-02-13Merge branch 'master' of git://labs.riseup.net/shared-sshdSilvio Rhatto
2010-12-20fix debian squeeze sshd_config template to add a missing newlineMicah Anderson
2010-12-16Introducing perfect forward secrecy for SSHSilvio Rhatto
2010-12-16do some trickery as arguments from puppet are passed as an arraymh
2010-12-16made error mesage a bit more verbosemh
2010-12-16remove stupid swapmh
2010-12-16Add a function to create ssh keys on the flymh
This allows you to use content of ssh keys within your manifests and generate them automatically if they don't exist yet.
2010-12-15remote KerberosGetAFSToken, its actually not a functional configuration ↵Micah Anderson
option, even though it is listed in the man page, and commented out in the default config file. I filed a bug with debian (#607238)
2010-12-14"ChallengeResponseAuthentication no" was being hardcoded later in the Debian ↵Micah Anderson
Lenny sshd_config template, even though we offer it as a variable. With this commit, the variable will actually work, rather than be overriden
2010-12-14add Debian Squeeze sshd template. Enabled kerberos and gssapi options, using ↵Micah Anderson
the defaults when not specified
2010-12-11Mention dependency on lsb module.intrigeri
2010-10-21lenny already has AcceptEnv by defaultmh
2010-10-21use realportmh
2010-10-20use parametrized class to pass ssh_ports to open up thingsmh
2010-10-20introduce that port also can't be the name, fix ensure problemmh
2010-10-20extend sshd::nagios with ensure parammh
2010-10-20add nagios_check_ssh_hostname to tweak the hostname which whould be ↵mh
monitored, as this one might actually differ
2010-10-20move define to own classmh
2010-10-18Bugfixintrigeri
2010-10-17Merge remote branch 'nadir/master'intrigeri
Conflicts: manifests/init.pp
2010-10-16Syntax fix.intrigeri
2010-10-16bugfixintrigeri
2010-10-16bugfixintrigeri
2010-10-16New option sshd_ports that obsoletes sshd_port.intrigeri
Backward compatibility is preserved.
2010-10-16Cleanup templates: sshd_port is guaranteed by init.pp not to be empty.intrigeri
2010-10-13sshd service has status and restart commands in post-etch Debian releases.intrigeri
2010-10-05nagios-cmd is now check_ssh_port - according to shared-nagiosnadir
2010-10-04Simplify by using the config_file definition.intrigeri
2010-10-03Add template for Debian Squeeze.intrigeri
2010-10-03Actually allow enabling ChallengeResponseAuthentication on Debian Lenny.intrigeri
2010-06-03Using sshd::client::debian for ubuntuSilvio Rhatto
2010-05-18Adding Ubuntu_lucid.erbSilvio Rhatto
2010-02-25Merge branch 'master' of git://labs.riseup.net/module_sshdSilvio Rhatto
2010-02-21update nagios check_command to check ssh port. it was using ssh_port, it ↵Micah Anderson
should be 'check_ssh_port'
2010-01-30Renaming $sshd_internal_ip to $sshd_shared_ipSilvio Rhatto
2009-12-28Merge branch 'master' of git://labs.riseup.net/module_sshdSilvio Rhatto
2009-12-27Merge remote branch 'lavamind/master'Micah Anderson
2009-12-27Reverting last changeSilvio Rhatto
2009-12-27Always including sshd::client::baseSilvio Rhatto
2009-12-27Using fqdn instead of hostname.domainSilvio Rhatto
2009-12-27Using sshrsakey instead of sshrsakey_keySilvio Rhatto