OP#575 finish password section
This commit is contained in:
@@ -33,6 +33,19 @@
|
||||
# Default is 'AUTH'.
|
||||
# @param [String] ssh_log_level LogLevel setting for sshd_config.
|
||||
# Default is 'INFO'.
|
||||
# @param [String] ssh_password_authentication PasswordAuthentication setting
|
||||
# for sshd_config. Default is 'no', which requires key-based authentication.
|
||||
# This is a recommended security setting, so passwords do not show up in logs,
|
||||
# but can be set to 'yes' if password authentication is desired.
|
||||
# @param [String] ssh_permit_empty_passwords PermitEmptyPasswords setting
|
||||
# for sshd_config. Default is 'no', which is a recommended security setting
|
||||
# and works in connection with key-based authentication, but can be set
|
||||
# to 'yes' if password authentication should be allowed and empty passwords
|
||||
# should be allowed. Again, this should be used with caution if enabled.
|
||||
# @param [String] ssh_kbd_interactive_auth setting for sshd_config.
|
||||
# Default is 'no', which is a recommended security setting together
|
||||
# with password authentication, but can be set to 'yes' if
|
||||
# keyboard-interactive authentication should be allowed. (not recommended)
|
||||
##############################################################################
|
||||
class confdroid_ssh::params (
|
||||
|
||||
@@ -62,7 +75,10 @@ class confdroid_ssh::params (
|
||||
String $ssh_hostkey_type = 'rsa',
|
||||
String $ssh_rekeylimit = 'default none',
|
||||
String $ssh_syslog_facility = 'AUTH',
|
||||
String $ssh_log_level = 'INFO'
|
||||
String $ssh_log_level = 'INFO',
|
||||
String $ssh_password_authentication = 'no',
|
||||
String $ssh_permit_empty_passwords = 'no',
|
||||
String $ssh_kbd_interactive_auth = 'no'
|
||||
|
||||
) {
|
||||
# default facts
|
||||
|
||||
Reference in New Issue
Block a user