Nigel Sim
1e515b0f5d
make the host option rendering support lists by refactoring the main option rendering code
put the ssh_config Host:* options in the defaults file so they can be overridden
il y a 9 ans
ketzacoatl
143451eb19
Add support for Host definitions in ssh_config
This gives us the ability to define system-wide definitions for specific Hosts, and their options.
For example, with this in pillar:
```
# this is the place for host-wide SSH config
ssh_config:
...
Hosts:
# this simplifies cloning with custom params
# eg: git clone my-git:foo/bar
my-git:
User: git
HostName: git.example.com
Port: 2222
```
This would add a section in `/etc/ssh/ssh_config`:
```
Host my-git
User git
HostName git.example.com
Port 2222
```
il y a 9 ans
abednarik
b813b4b52a
Replaced iteritems deprecated function with items
il y a 9 ans
abednarik
3791b11380
Added default path for sftp Subsystem in FreeBSD
il y a 9 ans
Bogdan Radulescu
13cf374efe
Added configuration options for ssh_config
Made a small change to reflect the default sshd_config
il y a 9 ans
Bogdan Radulescu
fd4381b769
The default value for ServerKeyBits is 1024 both upstream and in distros
il y a 9 ans
René Jochum
064d489f41
Use iteritems() instead of items().
Signed-off-by: René Jochum <rene@jochums.at>
il y a 9 ans
René Jochum
a013b79027
Use iteritems() instead of items().
Signed-off-by: René Jochum <rene@jochums.at>
il y a 9 ans
elfixit
18ba94d0fc
add options to give a key size to generate_key
il y a 9 ans
Ingo Bente
a927107b28
Adds support to customize /etc/ssh/moduli file
il y a 9 ans
Ingo Bente
83bb5ac5a0
adds support to harden sshd_config (KeyExchange, Ciphers, MACs)
il y a 9 ans
Thomas Juberg
6b68c44583
Stop messing up the first line in ssh_known_hosts
il y a 9 ans
Imran Haider
4dddff0ccd
Fix service name for Arch Linux
il y a 9 ans
Niels Abspoel
2a68ccac1a
Add option to remove ssh_host_keys
il y a 9 ans
Niels Abspoel
ca62b7d118
Improve default lookup
Added defaults.yaml and map.jinja similar to template-formula and salt-formula
il y a 9 ans
jvblasco
60691ef20d
Fix bug that added : at the end of the key
il y a 9 ans
Raphaël Hertzog
1b74efd2d0
Add a new openssh.known_hosts state
This state manages /etc/ssh/ssh_known_hosts and fills it with
public SSH host keys of other minions.
il y a 9 ans
Marc Schiffbauer
c6aeaf4dc5
add gentoo support
il y a 9 ans
Marc Schiffbauer
28e0916840
sort distros alphabetically
il y a 9 ans
Bernd Schlapsi
6efc981885
Refactor auth.sls to allow more keys for one user
il y a 10 ans
Niels Abspoel
33ee945557
Added AllowUsers,AllowGroups,DenyUsers,DenyGroups
This will add more options to set to secure openssh
- AllowUsers
- AllowGroups
- DenyUsers
- DenyGroups
il y a 10 ans
Bohdan Kmit
b843d8168b
add ed25519 host key type; add AuthenticationMethods option
il y a 10 ans
Niels Abspoel
5871efb5bd
added archlinux support to openssh map.jinja
il y a 10 ans
Franz Pletz
5d0f69ad2c
Cleanups for host key pillar example
il y a 10 ans
Franz Pletz
33f21a0976
Add support for ED25519 host keys
il y a 10 ans
Nitin Madhok
620cc0f199
Update map.jinja
il y a 10 ans
Nitin Madhok
131a5cafcb
Update map.jinja
il y a 10 ans
Nitin Madhok
9263857193
Update map.jinja
Correct indentation
il y a 10 ans
Niels Abspoel
1efce43d55
Added Opensuse support to map.jinja
il y a 10 ans
Skyler Berg
a83409182f
Fix jinja spacing mistake for unknown options
When specifying multiple unknown ssh options, they would all appear on
the same line.
il y a 10 ans
Tim Jones
09ca7de060
Allow newline after ListenAddress
il y a 10 ans
Robert Fairburn
8616d3d130
fix comment
il y a 10 ans
Robert Fairburn
b24101264f
make sure to match options as the options dict!
il y a 10 ans
Robert Fairburn
1a2de43ed7
defaults do not need a prefix
il y a 10 ans
Robert Fairburn
85c97b450a
fix a typo in keywords being sent improperly
il y a 10 ans
Robert Fairburn
abf6e09fbb
Fix a typo in the match jinja
il y a 10 ans
Robert Fairburn
ba72c1e8b7
remove prefix when not needed
il y a 10 ans
Robert Fairburn
c100fc88a3
allow for "Match" inside of an sshd_config
il y a 10 ans
Alan Pearce
6fb57f40bc
Config: Add support for generating keys
il y a 10 ans
Alan Pearce
73eaef4ea0
Config: Add support for ECDSA host keys
il y a 10 ans
Alan Pearce
ce46343562
Config: Refactor host key provisioning into loop
il y a 10 ans
Alan Pearce
2876a691b0
Remove reference to root group
By not specifying it, root user's group should be used.
il y a 10 ans
Alan Pearce
edc208b79b
Add FreeBSD compatibility
il y a 10 ans
Wes Turner
970777b9bb
Add a UseDNS option to sshd_config
il y a 10 ans
Oleg Tsarev
48ebd1b07b
Changed sshd_config generation to more readable scheme.
Synced file with default from Ubuntu 12.04 latest
il y a 10 ans
matthew-parlette
cdfab3953d
Define a line for each option.
This provides a default option (according to the package-provided config file) for each option in the config.
il y a 10 ans
Oleg Tsarev
7521398506
Removed unneeded whitespace from auth.sls
il y a 10 ans
matthew-parlette
2f28a008c2
Cleared out static parts of config since it was causing issues
il y a 10 ans
Seth House
b44c26cd13
Moved the rsa/dsa key management to config.sls
il y a 10 ans
Carlos Perelló Marín
e2cddca13e
Reverted the namespace change to avoid conflicts and backward incompatibilities
il y a 11 ans