summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-02-19Update README to include the ssh_keygen functionMicah Anderson
2011-02-19Pull together a more comprehensive README, moving the configurable variables ↵Micah Anderson
from init.pp into the README, and detailing the other features, and requirements, of the module
2011-02-14Merge remote branch 'shared/master'intrigeri
Conflicts: templates/sshd_config/Debian_squeeze.erb I always picked the shared repository version when conflicts arose. The only exception to this rule was: I kept my branch's "HostbasedUsesNameFromPacketOnly yes" in order to be consistent with existing Etch and Lenny templates. This is not the default Debian setting, but I would find it weird if a host had this setting changed by Puppet after upgrading to Squeeze. The right way to proceed would probably be to make this configurable.
2011-02-14Merge remote branch 'immerda/master'intrigeri
2010-12-20fix debian squeeze sshd_config template to add a missing newlineMicah Anderson
2010-12-16do some trickery as arguments from puppet are passed as an arraymh
2010-12-16made error mesage a bit more verbosemh
2010-12-16remove stupid swapmh
2010-12-16Add a function to create ssh keys on the flymh
This allows you to use content of ssh keys within your manifests and generate them automatically if they don't exist yet.
2010-12-15remote KerberosGetAFSToken, its actually not a functional configuration ↵Micah Anderson
option, even though it is listed in the man page, and commented out in the default config file. I filed a bug with debian (#607238)
2010-12-14"ChallengeResponseAuthentication no" was being hardcoded later in the Debian ↵Micah Anderson
Lenny sshd_config template, even though we offer it as a variable. With this commit, the variable will actually work, rather than be overriden
2010-12-14add Debian Squeeze sshd template. Enabled kerberos and gssapi options, using ↵Micah Anderson
the defaults when not specified
2010-12-11Mention dependency on lsb module.intrigeri
2010-10-21lenny already has AcceptEnv by defaultmh
2010-10-21use realportmh
2010-10-20use parametrized class to pass ssh_ports to open up thingsmh
2010-10-20introduce that port also can't be the name, fix ensure problemmh
2010-10-20extend sshd::nagios with ensure parammh
2010-10-20add nagios_check_ssh_hostname to tweak the hostname which whould be ↵mh
monitored, as this one might actually differ
2010-10-20move define to own classmh
2010-10-18Bugfixintrigeri
2010-10-17Merge remote branch 'nadir/master'intrigeri
Conflicts: manifests/init.pp
2010-10-16Syntax fix.intrigeri
2010-10-16bugfixintrigeri
2010-10-16bugfixintrigeri
2010-10-16New option sshd_ports that obsoletes sshd_port.intrigeri
Backward compatibility is preserved.
2010-10-16Cleanup templates: sshd_port is guaranteed by init.pp not to be empty.intrigeri
2010-10-13sshd service has status and restart commands in post-etch Debian releases.intrigeri
2010-10-05nagios-cmd is now check_ssh_port - according to shared-nagiosnadir
2010-10-04Simplify by using the config_file definition.intrigeri
2010-10-03Add template for Debian Squeeze.intrigeri
2010-10-03Actually allow enabling ChallengeResponseAuthentication on Debian Lenny.intrigeri
2010-02-21update nagios check_command to check ssh port. it was using ssh_port, it ↵Micah Anderson
should be 'check_ssh_port'
2009-12-27Merge remote branch 'lavamind/master'Micah Anderson
2009-12-21update comments to include information about how to use the nagiosMicah Anderson
checks and the pre-requirements
2009-12-19fix the comments section so that the include isn't misleading. if youMicah Anderson
use 'include sshd::debian', then none of the variables are set, and you will fail to parse the templates
2009-12-18remove fqdn from nagios service description (hostname is used in the ↵Jerome Charaoui
internal nagios_service name)
2009-12-18make key removal a bit easiermh
2009-12-18enable that ssh auth-keys can be removedmh
2009-12-11false != 'false'mh
2009-12-11set protocol 2 for centos, required.mh
2009-12-10require class instead of requiring packagesmh
2009-12-10re-add shorewall in rule :/mh
2009-12-10undef or '' as defaultmh
2009-12-10merged with riseup module, various cleaning upmh
2009-12-07move plugin directory to fit new 0.25 stylemh
2009-12-07switch to new lsb waymh
2009-12-07better set the variables in the initmh
2009-12-07upstream capability, fix new linesmh
- added new upstream options - don't put new lines for control statements
2009-12-07factor everything into its own filemh