aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-03-27Given that ssh -V prints the info we want on stderr, made it so we are 100% ↵Micah Anderson
sure we are only parsing the expected string
2015-03-02Merge branch 'document_nagios_custom_logic' into 'master'Jerome Charaoui
Document nagios custom logic Add some note for ppl who need to inject their own logic before creating nagios-related checks. See merge request !5
2015-02-20README: mention how one could reuse nagios resources with their own logicGabriel Filion
Some people might want to inject their own logic before including nagios resources. We can explain that since the nagios resources are in their own part of the manifests, they can shortcut the module's automatic handling of it, and call it manually from their own manifests.
2015-02-20README: Change project URL to point at the new oneGabriel Filion
2015-02-20Merge branch 'master' into 'master'LeLutin
Add RedHat_xenenterprise template symlink See merge request !4
2015-01-22Add RedHat_xenenterprise template symlinkJerome Charaoui
2015-01-17Merge branch 'master' into 'master'ng
Fix for Debian squeeze and ssh_keygen for Puppet < 3 installs Facter versions that are shipping in Debian squeeze and wheezy do not support the operatingsystemmajrelease core fact, which appears only from facter 1.7 onwards. This isn't a big problem for wheezy since the openssh-server version it ships supports multiple AuthorizedKeysFile file paths, On Debian squeeze, openssh-server does NOT support multuple AuthorizedKeysFile and will refuse to start with such a definition. ALSO: `ssh_keygen` is currently broken for Puppet 2.7.x clients. This commit should resolve the issue. The fix was suggested by @ng in reference to https://github.com/duritong/puppet-sysctl/blob/master/lib/puppet/provider/sysctl_runtime/sysctl_runtime.rb#L16-L17 See merge request !3
2015-01-15Fix ssh_keygen for Puppet < 3 installsJerome Charaoui
2015-01-15Debian squeeze and wheezy do not support the operatingsystemmajrelease fact ↵Jerome Charaoui
(they ship facter 1.6.x)
2014-11-21Add a $hostkey_type variable that allows you to set which hostkeyMicah Anderson
types you want to support in your sshd_config. We use the ssh_version fact to determine the default hostkey types. Only enable rsa and ed25519 for ssh versions greater or equal to 6.5, otherwise enable rsa and dsa. Some distributions, such as debian, also enable ecdsa as a hostkey type, but this is a known bad NIST curve, so we do not enable that by default (thus deviating from the stock sshd config)
2014-11-21add custom fact, providing ssh_versionMicah Anderson
2014-11-21Merge remote-tracking branch 'tails/feature/jessie-and-sid-templates'Micah Anderson
2014-11-01Merge remote-tracking branch 'immerda/master'Micah Anderson
2014-11-01Revert "get ecdsa host keys in Debian Wheezy"Micah Anderson
This reverts commit 1eabfe1b590f6663c2558f949408a08fc5f58fa6. These shitty NIST curves are no good
2014-09-17Copy the Debian sid template to a new one for Jessie.intrigeri
Another option could be to symlink it, but the freeze is coming soon, so most likely they'll start to diverge at some point.
2014-09-17Resynchronize Debian sid template with the configuration file currently ↵intrigeri
shipped by the package.
2014-08-24Disable ECDSA key until we fix pubkey distributionSilvio Rhatto
2014-08-19Dot not use DSA keys on squeezeSilvio Rhatto
2014-08-19Dot not use DSA keys on wheezySilvio Rhatto
2014-08-19get ecdsa host keys in Debian Wheezykwadronaut
2014-08-19OopsSilvio Rhatto
2014-08-19Back to hmac-sha1 on lenny/squeezeSilvio Rhatto
2014-08-19Back to OpenSSH HMAC: SHA1 -> SHA2-512 (suggested by duraconf)Silvio Rhatto
2014-08-15move to os release number on centos for selectionmh
2014-06-10Openbsd also does not yet have itmh
2014-06-10EL 6 also does not have this option yetmh
2014-06-10lintig a documentmh
2014-06-10not all versions support the new defaultmh
2014-06-10Merge remote-tracking branch 'shared/master'mh
Conflicts: manifests/init.pp
2014-05-27update $authorized_keys_file variable default to be the default isMicah Anderson
documented by sshd_config(5)
2014-05-27add the ability to override the automatic inclusion of the sshd_clientMicah Anderson
2014-03-14lintingmh
2014-03-14remove unnecessary parammh
2014-02-21renamed ipaddress_fact to sshkey_ipaddresTomas Barton
2014-02-14too tired to typeTomas Barton
2014-02-14fixed variable nameTomas Barton
2014-02-14custom ip address factTomas Barton
2014-02-05add test for optionsmh
2014-02-05wordingmh
2014-02-02tests for ssh authorized keyTomas Barton
2014-02-01Merge pull request #7 from deric/more-testsduritong
More tests
2014-01-27validate parametersTomas Barton
2014-01-27removed lsb-release packageTomas Barton
2014-01-27removed special no-restart status for etchTomas Barton
2014-01-26using fixtures.yml for linking foldersTomas Barton
2014-01-26test changing portTomas Barton
2014-01-26client specTomas Barton
2014-01-26ruby 1.8.7 compatibilityTomas Barton
2014-01-26removed shared-common from dependenciesTomas Barton
2014-01-26basic init class specsTomas Barton