opendev/puppet-ssh
Code Issues Proposed changes

Make sshd PermitRootLogin configurable

Browse Source 
Make this configurable so that it can be enabled for images used
by nodepool.

Change-Id: I704453c6d3091a24e68509650c61efb638aea601
This commit is contained in:
Derek Higgins 2016-07-08 23:44:25 +01:00
parent 1d88ae1dd4
commit 5d55606789
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
manifests/init.pp
View File

@ -1,6 +1,9 @@
# == Class: ssh # == Class: ssh
# #
class ssh ($trusted_ssh_source = 'puppetmaster.openstack.org') { class ssh (
$trusted_ssh_source = 'puppetmaster.openstack.org',
$permit_root_login = 'no',
) {
include ::ssh::params include ::ssh::params
package { $::ssh::params::package_name: package { $::ssh::params::package_name:
ensure => present, ensure => present,

2
templates/sshd_config.erb
View File

@ -23,7 +23,7 @@ LogLevel INFO
# Authentication: # Authentication:
LoginGraceTime 120 LoginGraceTime 120
PermitRootLogin no PermitRootLogin <%= @permit_root_login %>
StrictModes yes StrictModes yes
RSAAuthentication yes RSAAuthentication yes