Puppet Class: openssh::server
- Defined in:
- manifests/server.pp
Overview
Installs and manages the OpenSSH server.
150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 |
# File 'manifests/server.pp', line 150
class openssh::server (
Stdlib::Absolutepath $conf_dir,
Stdlib::Absolutepath $conf_file,
Boolean $manage_package,
String $service_name,
Hash[String, Hash[String, Any]] $matches,
Hash[String, Hash[String, Any]] $subsystems,
Optional[String] $package_name = undef,
# sshd_config settings below
Optional[Array[String, 1]] $accept_env = undef,
Optional[Enum['any', 'inet', 'inet6']] $address_family = undef,
Optional[Boolean] $allow_agent_forwarding = undef,
Optional[Array[String, 1]] $allow_groups = undef,
Optional[Variant[Boolean, Enum['all', 'local', 'remote']]] $allow_stream_local_forwarding = undef,
Optional[Variant[Boolean, Enum['all', 'local', 'remote']]] $allow_tcp_forwarding = undef,
Optional[Array[String, 1]] $allow_users = undef,
Optional[Array[Array[String, 1], 1]] $authentication_methods = undef,
Optional[String] $authorized_keys_command = undef,
Optional[String] $authorized_keys_command_user = undef,
Optional[String] $authorized_keys_command_run_as = undef,
Optional[String] $authorized_keys_file = undef,
Optional[String] $authorized_principals_command = undef,
Optional[String] $authorized_principals_command_user = undef,
Optional[String] $authorized_principals_file = undef,
Optional[Stdlib::Absolutepath] $banner = undef,
Optional[Boolean] $challenge_response_authentication = undef,
Optional[String] $chroot_directory = undef,
Optional[Array[String, 1]] $ciphers = undef,
Optional[Integer[0]] $client_alive_count_max = undef,
Optional[Integer[0]] $client_alive_interval = undef,
Optional[Variant[Boolean, Enum['delayed']]] $compression = undef,
Optional[Array[String, 1]] $deny_groups = undef,
Optional[Array[String, 1]] $deny_users = undef,
Optional[Boolean] $disable_forwarding = undef,
Optional[Enum['never', 'pam-only', 'pam-and-env']] $expose_authentication_methods = undef,
Optional[Enum['md5', 'sha256']] $fingerprint_hash = undef,
Optional[String] $force_command = undef,
Optional[Variant[Boolean, Enum['clientspecified']]] $gateway_ports = undef,
Optional[Boolean] $gssapi_authentication = undef,
Optional[Boolean] $gssapi_cleanup_credentials = undef,
Optional[Boolean] $gssapi_key_exchange = undef,
Optional[Boolean] $gssapi_enable_k5users = undef,
Optional[Boolean] $gssapi_strict_acceptor_check = undef,
Optional[Boolean] $gssapi_store_credentials_on_rekey = undef,
Optional[Array[String, 1]] $gssapi_kex_algorithms = undef,
Optional[Array[String, 1]] $hostbased_accepted_key_types = undef,
Optional[Boolean] $hostbased_authentication = undef,
Optional[Boolean] $hostbased_uses_name_from_packet_only = undef,
Optional[Stdlib::Absolutepath] $host_certificate = undef,
Optional[Array[Stdlib::Absolutepath, 1]] $host_key = undef,
Optional[String] $host_key_agent = undef,
Optional[Array[String, 1]] $host_key_algorithms = undef,
Optional[Boolean] $ignore_rhosts = undef,
Optional[Boolean] $ignore_user_known_hosts = undef,
Optional[Tuple[OpenSSH::QoS, 1, 2]] $ip_qos = undef,
Optional[Boolean] $kbd_interactive_authentication = undef,
Optional[Boolean] $kerberos_authentication = undef,
Optional[Boolean] $kerberos_get_afs_token = undef,
Optional[Boolean] $kerberos_or_local_passwd = undef,
Optional[Boolean] $kerberos_ticket_cleanup = undef,
Optional[Boolean] $kerberos_use_kuserok = undef,
Optional[Array[String, 1]] $kex_algorithms = undef,
Optional[Integer[0]] $key_regeneration_interval = undef,
Optional[Array[Variant[Bodgitlib::Host, Tuple[Bodgitlib::Host, Bodgitlib::Port]], 1]] $listen_address = undef,
Optional[Integer[0]] $login_grace_time = undef,
Optional[String] $log_level = undef,
Optional[Array[String, 1]] $macs = undef,
Optional[Integer[0]] $max_auth_tries = undef,
Optional[Integer[0]] $max_sessions = undef,
Optional[Variant[Integer[0], Tuple[Integer[0], 3, 3]]] $max_startups = undef,
Optional[Boolean] $password_authentication = undef,
Optional[Boolean] $permit_empty_passwords = undef,
Optional[Variant[Enum['any', 'none'], Array[Tuple[Bodgitlib::Host, Bodgitlib::Port], 1]]] $permit_open = undef,
Optional[Variant[Boolean, Enum['without-password', 'forced-commands-only']]] $permit_root_login = undef,
Optional[Boolean] $permit_tty = undef,
Optional[Variant[Boolean, Enum['point-to-point', 'ethernet']]] $permit_tunnel = undef,
Optional[Boolean] $permit_user_environment = undef,
Optional[Boolean] $permit_user_rc = undef,
Optional[Stdlib::Absolutepath] $pid_file = undef,
Optional[Array[Bodgitlib::Port, 1]] $port = undef,
Optional[Boolean] $print_last_log = undef,
Optional[Boolean] $print_motd = undef,
Optional[Array[Integer[1, 2], 1, 2]] $protocol = undef,
Optional[Boolean] $pubkey_authentication = undef,
Optional[OpenSSH::RekeyLimit] $rekey_limit = undef,
Optional[Stdlib::Absolutepath] $revoked_keys = undef,
Optional[Boolean] $rhosts_rsa_authentication = undef,
Optional[Boolean] $rsa_authentication = undef,
Optional[Integer[0]] $server_key_bits = undef,
Optional[Boolean] $show_patch_level = undef,
Optional[Pattern[/(?x) ^ [0-7]{4} $/]] $stream_local_bind_mask = undef,
Optional[Boolean] $stream_local_bind_unlink = undef,
Optional[Boolean] $strict_modes = undef,
Optional[String] $syslog_facility = undef,
Optional[Boolean] $tcp_keepalive = undef,
Optional[Stdlib::Absolutepath] $trusted_user_ca_keys = undef,
Optional[Boolean] $use_dns = undef,
Optional[Boolean] $use_login = undef,
Optional[Boolean] $use_pam = undef,
Optional[Variant[Boolean, Enum['sandbox']]] $use_privilege_separation = undef,
Optional[String] $version_addendum = undef,
Optional[Integer[0]] $x11_display_offset = undef,
Optional[Boolean] $x11_forwarding = undef,
Optional[Integer[0]] $x11_max_displays = undef,
Optional[Boolean] $x11_use_localhost = undef,
Optional[Stdlib::Absolutepath] $xauth_location = undef,
) {
contain ::openssh::server::install
contain ::openssh::server::config
contain ::openssh::server::service
Class['::openssh::server::install'] ~> Class['::openssh::server::config']
~> Class['::openssh::server::service']
}
|