diff --git a/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html b/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html index b92d607..ea0d346 100644 --- a/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html +++ b/doc/puppet_classes/confdroid_ssh_3A_3Aparams.html @@ -340,6 +340,132 @@ —
MaxSessions setting for sshd_config
+PubkeyAuthentication setting for sshd_config
+AuthorizedKeysFile setting for sshd_config
+AuthorizedPrincipalsFile setting for sshd_config. Default is ‘none’ to disable this setting.
+AuthorizedKeysCommand setting for sshd_config. Default is ‘none’ to disable this setting.
+AuthorizedKeysCommandUser setting for sshd_config. Default is ‘nobody’ to use an unpriviledged user.
+whether to use a specific host key
+type of host key to use if ssh_use_specific_hostkey is true
-20 -21 -22 -23 -24 -25 -26 -27 -28 -29 -30 31 32 33 @@ -395,30 +510,55 @@ 57 58 59 -60+60 +61 +62 +63 +64 +65 +66 +67 +68 +69 +70 +71 +72 +73 +74 +75 +76 +77 +78
# File 'manifests/params.pp', line 20
+ # File 'manifests/params.pp', line 31
class confdroid_ssh::params (
- Array $ssh_reqpackages = ['openssh','openssh-clients','openssh-server'],
- String $pkg_ensure = 'present',
+ Array $ssh_reqpackages = ['openssh','openssh-clients','openssh-server'],
+ String $pkg_ensure = 'present',
# firewall settings
- String $ssh_fw_rule = 'present',
- String $ssh_fw_port = '22',
- String $ssh_fw_order = '50',
- String $ssh_source_range = '0.0.0.0/0',
+ String $ssh_fw_rule = 'present',
+ String $ssh_fw_port = '22',
+ String $ssh_fw_order = '50',
+ String $ssh_source_range = '0.0.0.0/0',
- # main configuration
- Boolean $ssh_manage_config = true,
- String $ssh_address_family = 'any',
- String $ssh_listen_address = '0.0.0.0',
- String $ssh_root_login = 'prohibit-password',
- String $ssh_strict_modes = 'yes',
- String $ssh_max_auth_tries = '6',
- String $ssh_max_sessions = '10',
+ # sshd configuration
+ Boolean $ssh_manage_config = true,
+ String $ssh_address_family = 'any',
+ String $ssh_listen_address = '0.0.0.0',
+ String $ssh_root_login = 'prohibit-password',
+ String $ssh_strict_modes = 'yes',
+ String $ssh_max_auth_tries = '6',
+ String $ssh_max_sessions = '10',
+ String $ssh_pubkey_auth = 'yes',
+ String $ssh_auth_key_files = '.ssh/authorized_keys',
+ String $ssh_authorized_principals_file = 'none',
+ String $ssh_authorized_keys_command = 'none',
+ String $ssh_authorized_keys_command_user = 'nobody',
+ Boolean $ssh_use_specific_hostkey = false,
+ String $ssh_hostkey_type = 'rsa',
) {
# default facts