diff options
| author | Micah Anderson <micah@riseup.net> | 2010-12-15 20:38:07 -0500 |
|---|---|---|
| committer | Micah Anderson <micah@riseup.net> | 2010-12-15 20:38:07 -0500 |
| commit | 0ec0562257a0a0bde04c149f323c47632071005c (patch) | |
| tree | 54000d28c63aafb8f2f7c85e2d816d830cd8d4a8 | |
| parent | 167cf532711ac88e9d93fe77b9d904206d98ac1a (diff) | |
| download | puppet-sshd-0ec0562257a0a0bde04c149f323c47632071005c.tar.gz puppet-sshd-0ec0562257a0a0bde04c149f323c47632071005c.tar.bz2 | |
remote KerberosGetAFSToken, its actually not a functional configuration option, even though it is listed in the man page, and commented out in the default config file. I filed a bug with debian (#607238)
| -rw-r--r-- | manifests/init.pp | 8 | ||||
| -rw-r--r-- | templates/sshd_config/Debian_squeeze.erb | 5 |
2 files changed, 0 insertions, 13 deletions
diff --git a/manifests/init.pp b/manifests/init.pp index 002b927..90b7c64 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -84,11 +84,6 @@ # Valid values: yes or no # Default: no # -# sshd_kerberos_getafstoken: If AFS is active and user has a Kerberos 5 TGT, attempt to -# acquire an AFS token before accessing the user's home directory. -# Valid values: yes or no -# Default: no -# # sshd_kerberos_orlocalpasswd: If password authentication through Kerberos fails, then the password # will be validated via any additional local mechanism. # Valid values: yes or no @@ -192,9 +187,6 @@ class sshd { case $sshd_kerberos_authentication { '': { $sshd_kerberos_authentication = 'no' } } - case $sshd_kerberos_getafstoken { - '': { $sshd_kerberos_getafstoken = 'no' } - } case $sshd_kerberos_orlocalpasswd { '': { $sshd_kerberos_orlocalpasswd = 'yes' } } diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb index 9f91c16..cfdd291 100644 --- a/templates/sshd_config/Debian_squeeze.erb +++ b/templates/sshd_config/Debian_squeeze.erb @@ -117,11 +117,6 @@ KerberosAuthentication yes <%- else -%> KerberosAuthentication no <%- end -%> -<%- if sshd_kerberos_getafstoken.to_s == 'yes' then -%> -KerberosGetAFSToken yes -<%- else -%> -KerberosGetAFSToken no -<%- end -%> <%- if sshd_kerberos_orlocalpasswd.to_s == 'yes' then -%> KerberosOrLocalPasswd yes <%- else -%> |