reschl
ffafd2a2f5
Support package versions ( #134 )
added possibility to configure server version and client version
with pillar example
6 лет назад
Philippe Grégoire
7cfc9f5a04
Hint at `Host` support for `ssh_config` ( #133 )
The `ssh_config` state supports generating `Host` sections, but it is
buried in the source. By default, options are simply dumped in the
configuration file; without any `Host` directive.
This patch hints (and, actually, encourages) users to use `Host`
sections by updating the pillar example to use the `Hosts` directive
with the `*` pattern.
6 лет назад
Javier Bértoli
6e077f5dbe
Merge pull request #131 from tmeneau/fix-config-require-in-for-keys
Fix invalid require_in sshd_config for key states
6 лет назад
tmeneau
63ad14efb1
Fix invalid require_in sshd_config for key states
Change the require_ins used by the key management states in the
config.sls to be conditional based on whether the sshd_config
is managed by the formula
Fixes #130
6 лет назад
alxwr
aa3da8f2c2
Pillar openssh.known_hosts_salt_ssh ( #128 )
* Pillar openssh.known_hosts_salt_ssh
* Dropped ill-named file
* Fixed aliasing of host names
* Improved pillar.example
* Opt-in to include localhost
* pillar/known_hosts_salt_ssh: clear cache in run()
* Dropped forgotten debugging output
6 лет назад
alxwr
11366b3c17
Merge pull request #127 from 0xf10e/known_hosts_pillar
Add host keys from pillar to `ssh_known_hosts`
6 лет назад
Florian Ermisch
bf9b9a335c
Add `openssh:known_hosts:static` to README and pillar.example
6 лет назад
Florian Ermisch
45763f54aa
Add host keys from pillar[openssh:known_hosts:static] to `ssh_known_hosts`
6 лет назад
Niels Abspoel
b93448b5e6
Merge pull request #124 from arthurlogilab/123-add-ini-version-of-config
[openssh/config_ini] initial version of config_ini which uses ini state
6 лет назад
Javier Bértoli
fdc3ca398d
Merge pull request #125 from aboe76/python3_support
fix iteritems for python3
6 лет назад
Niels Abspoel
af9721a0f5
fix iteritems for python3
6 лет назад
Raphaël Hertzog
6ccb9fc87d
Replace deprecated "user" attribute by "runas"
7 лет назад
Arthur Lutz
dcb70e5181
[openssh/config_ini] initial version of config_ini which uses ini state
closes #123
7 лет назад
alxwr
73727bc218
Merge pull request #118 from Perceptyx/master
[FIX] When key is present override generating by any way
7 лет назад
Mario Fritschen
e665450ed4
Changed expr_form to tgt_type for deprecation reasons. ( #122 )
7 лет назад
alxwr
5e3368afcb
drop default values ( fixes #102 ) ( #117 )
* drop default values (fixes #102 )
* hmac-ripemd160 was dropped in 7.6
7 лет назад
Andres Montalban
26f2fc8e97
[FIX] When key is present override generating by any way
7 лет назад
Alexander Weidinger
a2dd72bb3e
Merge branch 'aboe76-improve_allowed_users_groups'
7 лет назад
Niels Abspoel
9cdb9aaba0
improve allow_deny_users_groups
7 лет назад
alxwr
178692f92e
Merge pull request #113 from brianholland99/master
Add ConfigBanner to processed_options when handled.
7 лет назад
Niels Abspoel
d157c0a36e
Merge pull request #111 from saltstack-formulas/hostnames-in-known-hosts
Hostnames in known hosts
7 лет назад
Brian Holland
6400516c5e
Add ConfigBanner to processed_options when handled.
This prevents a verbatim version being added to end of file that will
cause the parsing to fail.
7 лет назад
Niels Abspoel
0eda16c548
Merge pull request #112 from chessclub/multiline-banner-fix
Fixed supporting multiline banner_string defined in the pillar.
7 лет назад
Tibold Kandrai
83e60fd840
Fixed supporting multiline banner_string defined in the pillar.
7 лет назад
Alexander Weidinger
e523ae5281
Optionally add hostnames to known_hosts
7 лет назад
Alexander Weidinger
75e582a7bc
New macro: known_hosts_entry; added comments
7 лет назад
Niels Abspoel
0924649158
Merge pull request #109 from saltstack-formulas/UsePrivilegeSeparation
CentOS 6: UsePrivilegeSeparation 'yes' (fixes #108 )
7 лет назад
Alexander Weidinger
f4cf9aa22b
CentOS 6: UsePrivilegeSeparation 'yes' ( fixes #108 )
7 лет назад
Niels Abspoel
9b7fc59a35
Merge pull request #107 from saltstack-formulas/UsePrivilegeSeparation
UsePrivilegeSeparation 'sandbox'
7 лет назад
Alexander Weidinger
a5f4a56956
UsePrivilegeSeparation 'sandbox'
This is was introduced in 5.9, and is default in 6.1.
https://www.openssh.com/txt/release-5.9
https://www.openssh.com/txt/release-6.1
7 лет назад
Niels Abspoel
2171040e11
Merge pull request #106 from saltstack-formulas/fix-keygen
Fixed key generation
7 лет назад
Alexander Weidinger
7afea021c6
Fixed key generation
- generate before running check_mk on the sshd_config
- set permissions on private key
- cope with empty keys
7 лет назад
alxwr
7cd1faac84
Merge pull request #105 from Perceptyx/master
Create needed directory for UsePrivilegeSeparation option
7 лет назад
Andres Montalban
c7a97ae72f
Create needed directory for UsePrivilegeSeparation option
7 лет назад
Andres Montalban
1a65c5996e
Merge remote-tracking branch 'upstream/master'
7 лет назад
Niels Abspoel
6dba76fe56
Merge pull request #104 from Perceptyx/banner_fix
Allow to configure SSH banner text in pillar
7 лет назад
Andres Montalban
3e7f6f7648
Merge pull request #1 from amontalban/banner_fix
Allow to configure SSH banner text in pillar
7 лет назад
Andres Montalban
500c915c33
Allow to config banner in pillar
7 лет назад
Andres Montalban
467c5e56fc
Remove extra whitespace
7 лет назад
Alexander Weidinger
c71f2ae4fa
minor fix: use keyFile in config.sls
7 лет назад
Alexander Weidinger
e44d8860f4
Sort Match options
7 лет назад
Alexander Weidinger
d37de77ba2
Copied docs from commit to pillar.example
7 лет назад
Alexander Weidinger
f810b27211
Merge branch 'prioritized-compound-match-2' of git://github.com/mikemol/openssh-formula
7 лет назад
Alexander Weidinger
52b0eb2816
Merge branch 'mikemol-match-prioritization-2'
7 лет назад
Florian Ermisch
add969822c
add optional `{{source}} to sshd_config
7 лет назад
Florian Ermisch
8594cd90ba
add optional `{{source}} to ssh_config
7 лет назад
Seth House
8dbb1e9088
Merge pull request #97 from 0xf10e/toggle_source_url
Add optional {{ source }} to config files
7 лет назад
Florian Ermisch
dbf51549ed
add optional `{{source}} to sshd_config
7 лет назад
Florian Ermisch
e298397cc7
add optional `{{source}} to ssh_config
7 лет назад
Michael Mol
6229a6d122
Stabily sort matches
OpenSSH's Match declarations are applied first-match-wins. However, we
can't safely define two Matches that might overlap unless we first sort
the keys, as Python (and Jinja) dicts don't guarantee the order of
dict keys,
We also won't scramble the match sequence every time the user adds,
removes or renames a match, and so we give the user clearer, more
concise diffs as when they apply changes.
Finally, we leave a comment on the Match line identifying where the
Match rule came from, to assist in troubleshooting.
7 лет назад