From ba8d788f89e2e8676985b40553a9f6794a322217 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@riseup.net>
Date: Fri, 26 Sep 2008 17:28:05 -0400
Subject: add the sshd_strict_modes variable, with the default set to yes

---
 manifests/init.pp | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'manifests')

diff --git a/manifests/init.pp b/manifests/init.pp
index a58ee58..858e1b5 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -56,9 +56,13 @@
 # 				Valid Values: yes or no
 #				Default: yes
 #
-# sshd_rsa_authentication:	If you wat to enable RSA Authentication
+# sshd_rsa_authentication:	If you want to enable RSA Authentication
 # 				Valid Values: yes or no
 #				Default: no
+#				
+# sshd_strict_modes:		If you want to set StrictModes (check file modes/ownership before accepting login)
+# 				Valid Values: yes or no
+#				Default: yes
 
 class sshd {
     include sshd::client 
@@ -113,6 +117,10 @@ class sshd::base {
     	'' => 'no',
 	default => $sshd_rsa_authentication
     }
+    $real_sshd_strict_modes = $sshd_strict_modes ? {
+    	'' => 'yes',
+	default => $sshd_strict_modes
+    }
 
     file { 'sshd_config':
         path => '/etc/ssh/sshd_config',
-- 
cgit v1.2.3