773d9ae092
Apply string-or-list processing to ssh_config
...
Now ssh_config also accepts string-or-list options, for serveral
keywords.
2017-01-24 01:34:24 +07:00
30648d115e
Add macro to handle string or list
...
Added a macro to handle multivalue options entered in either string
format or list format (with auto joiner).
2017-01-24 01:17:51 +07:00
b9689cedff
Merge pull request #79 from leansalt/server-service-control
...
Add ability to control SSH server service status (default: on)
2017-01-15 21:48:04 -08:00
686fc2c4ee
do not set UsePAM on OpenBSD
...
Upstream opensshd does not support PAM
2017-01-14 18:38:37 -05:00
1b69ecab2c
fix issue with stripping new line will result in invalid SLS definition if AuthorizedKeysFile is missing in sshd_config
2016-11-02 15:21:50 +01:00
2a1b8fbc66
fix issue sshd won't start if AddressFamily is specified, because it must be defined before ListenAddress
2016-11-01 13:24:30 +01:00
ec663a6f5e
Merge pull request #51 from mathieupotier/master
...
Put ssh keys on configured path in sshd_config (AuthorizedKeysFile)
2016-10-31 09:32:50 -07:00
51fd8b1391
fix Subsystem directive on archlinux
2016-10-30 00:06:02 -04:00
de66dbee97
Update name of package containing dig on ArchLinux
2016-10-14 22:25:56 +00:00
02b52fa7cf
Add AuthorizedKeysCommand support
...
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2016-10-01 20:53:44 +02:00
760a2ad277
fix the path to authkeys
...
Allow user to specify aliased path (with %u)
2016-08-02 09:54:46 +02:00
4c814843f8
Merge remote-tracking branch 'refs/remotes/saltstack-formulas/master'
2016-08-02 09:46:08 +02:00
e6603ae62a
Allow moduli to be pulled as file
...
Added Jinja logic to allow the option to pull the moduli from an online source.
2016-08-01 23:59:11 +07:00
781be61881
Convert dig exist check to unless req
2016-07-19 13:23:48 -07:00
87057c7c6b
Correct openssh-clients package name for Red Hat
2016-07-01 23:53:00 -06:00
641851632f
add more authentication options
2016-05-26 21:57:02 +02:00
3542a1f534
Implement Session idle time out
2016-05-25 00:06:45 +02:00
22037f7b8b
Merge pull request #63 from llua/arch_bind_utils
...
set dig_pkg on arch linux for issue #59
2016-05-09 20:52:42 -07:00
dfb04a43b4
set dig_pkg on arch linux for issue #59
2016-05-09 23:47:57 -04:00
bd8d46d784
add OpenBSD to map.jinja
2016-05-09 23:44:20 -04:00
f7c84783f0
Merge pull request #61 from babilen/relax-ssh-defaults
...
Drop overly biased ssh_config defaults
2016-05-04 12:32:48 -07:00
49923a6371
Drop overly opinionated ssh_config defaults
...
This set of options reflect the ssh_config options that are set by
default on Debian. The way this was set before has the potential to
break exisisting setups that rely on "normal" defaults, rather than the
rather opinionated ones that are now being shipped with this formula.
2016-05-04 18:25:01 +02:00
daed52de19
Add sshd_config to map.jinja and check if dig command is available before installing 'dig' package.
2016-04-19 02:53:14 +02:00
0abbaac60d
Fix the default Subystem sftp-server path for SLE
2016-03-23 14:41:25 +01:00
1e515b0f5d
make the host option rendering support lists by refactoring the main option rendering code
...
put the ssh_config Host:* options in the defaults file so they can be overridden
2016-01-14 02:57:45 +00:00
143451eb19
Add support for Host definitions in ssh_config
...
This gives us the ability to define system-wide definitions for specific Hosts, and their options.
For example, with this in pillar:
```
# this is the place for host-wide SSH config
ssh_config:
...
Hosts:
# this simplifies cloning with custom params
# eg: git clone my-git:foo/bar
my-git:
User: git
HostName: git.example.com
Port: 2222
```
This would add a section in `/etc/ssh/ssh_config`:
```
Host my-git
User git
HostName git.example.com
Port 2222
```
2016-01-02 18:12:55 -05:00
33344743b0
Add ability to control SSH server status (default: on)
2015-12-27 18:17:01 +01:00
b813b4b52a
Replaced iteritems deprecated function with items
2015-11-30 09:25:28 -03:00
3791b11380
Added default path for sftp Subsystem in FreeBSD
2015-11-29 15:56:17 -03:00
f55445211c
Specify config clause only if defined in pillar.
...
Signed-off-by: POTIER Mathieu <mathieu.potier@onzeway.eu>
2015-11-18 20:33:50 +01:00
dda1fb5128
Put ssh keys on configured path in sshd_config (AuthorizedKeysFile)
...
Signed-off-by: POTIER Mathieu <mathieu.potier@onzeway.eu>
2015-11-17 11:09:37 +01:00
13cf374efe
Added configuration options for ssh_config
...
Made a small change to reflect the default sshd_config
2015-10-01 15:21:16 +00:00
fd4381b769
The default value for ServerKeyBits is 1024 both upstream and in distros
2015-07-30 12:27:05 +00:00
c27f9a81f3
Use iteritems() instead of items().
...
Signed-off-by: René Jochum <rene@jochums.at>
2015-07-13 16:00:22 +02:00
064d489f41
Use iteritems() instead of items().
...
Signed-off-by: René Jochum <rene@jochums.at>
2015-07-13 15:59:44 +02:00
a013b79027
Use iteritems() instead of items().
...
Signed-off-by: René Jochum <rene@jochums.at>
2015-07-13 15:56:25 +02:00
18ba94d0fc
add options to give a key size to generate_key
2015-07-12 18:09:26 +02:00
a927107b28
Adds support to customize /etc/ssh/moduli file
2015-07-02 19:09:41 +02:00
83bb5ac5a0
adds support to harden sshd_config (KeyExchange, Ciphers, MACs)
2015-06-30 14:33:57 +02:00
6b68c44583
Stop messing up the first line in ssh_known_hosts
2015-06-25 14:28:26 +02:00
4dddff0ccd
Fix service name for Arch Linux
2015-06-20 14:24:51 -04:00
2a68ccac1a
Add option to remove ssh_host_keys
2015-06-07 20:37:33 +02:00
ca62b7d118
Improve default lookup
...
Added defaults.yaml and map.jinja similar to template-formula and salt-formula
2015-06-02 22:52:59 +02:00
60691ef20d
Fix bug that added : at the end of the key
2015-05-22 14:32:57 +02:00
1b74efd2d0
Add a new openssh.known_hosts state
...
This state manages /etc/ssh/ssh_known_hosts and fills it with
public SSH host keys of other minions.
2015-03-26 17:50:32 +01:00
c6aeaf4dc5
add gentoo support
2015-03-23 14:56:12 +01:00
28e0916840
sort distros alphabetically
2015-03-23 14:55:40 +01:00
6efc981885
Refactor auth.sls to allow more keys for one user
2015-01-28 22:17:07 +01:00
33ee945557
Added AllowUsers,AllowGroups,DenyUsers,DenyGroups
...
This will add more options to set to secure openssh
- AllowUsers
- AllowGroups
- DenyUsers
- DenyGroups
2015-01-16 22:56:59 +01:00
b843d8168b
add ed25519 host key type; add AuthenticationMethods option
2015-01-16 17:21:10 +00:00
5871efb5bd
added archlinux support to openssh map.jinja
2015-01-01 00:44:17 +01:00
5d0f69ad2c
Cleanups for host key pillar example
2014-12-15 07:00:45 +01:00
33f21a0976
Add support for ED25519 host keys
2014-12-15 07:00:17 +01:00
620cc0f199
Update map.jinja
2014-12-08 16:01:00 -05:00
131a5cafcb
Update map.jinja
2014-12-08 15:46:30 -05:00
9263857193
Update map.jinja
...
Correct indentation
2014-12-08 15:43:40 -05:00
1efce43d55
Added Opensuse support to map.jinja
2014-12-08 21:38:23 +01:00
a83409182f
Fix jinja spacing mistake for unknown options
...
When specifying multiple unknown ssh options, they would all appear on
the same line.
2014-11-18 14:58:57 -08:00
09ca7de060
Allow newline after ListenAddress
2014-10-26 20:27:11 +01:00
8616d3d130
fix comment
2014-09-19 12:01:57 -05:00
b24101264f
make sure to match options as the options dict!
2014-09-19 11:26:10 -05:00
1a2de43ed7
defaults do not need a prefix
2014-09-19 11:21:31 -05:00
85c97b450a
fix a typo in keywords being sent improperly
2014-09-19 11:19:37 -05:00
abf6e09fbb
Fix a typo in the match jinja
2014-09-19 11:16:58 -05:00
ba72c1e8b7
remove prefix when not needed
2014-09-19 10:55:19 -05:00
c100fc88a3
allow for "Match" inside of an sshd_config
2014-09-19 10:47:35 -05:00
6fb57f40bc
Config: Add support for generating keys
2014-08-24 16:09:12 +01:00
73eaef4ea0
Config: Add support for ECDSA host keys
2014-08-24 11:55:38 +01:00
ce46343562
Config: Refactor host key provisioning into loop
2014-08-24 11:55:38 +01:00
2876a691b0
Remove reference to root group
...
By not specifying it, root user's group should be used.
2014-08-19 21:44:38 +01:00
edc208b79b
Add FreeBSD compatibility
2014-08-08 13:38:27 +01:00
970777b9bb
Add a UseDNS option to sshd_config
2014-07-22 00:35:11 -05:00
48ebd1b07b
Changed sshd_config generation to more readable scheme.
...
Synced file with default from Ubuntu 12.04 latest
2014-05-05 19:28:13 +04:00
cee3f097f0
Merge pull request #12 from z-saltstack/auth-sls-clean-whitespaces
...
Removed unneeded whitespace from auth.sls
2014-04-28 18:03:58 -06:00
cdfab3953d
Define a line for each option.
...
This provides a default option (according to the package-provided config file) for each option in the config.
2014-04-26 18:22:17 -04:00
7521398506
Removed unneeded whitespace from auth.sls
2014-04-26 22:40:29 +02:00
2f28a008c2
Cleared out static parts of config since it was causing issues
2014-04-25 16:33:07 -04:00
b44c26cd13
Moved the rsa/dsa key management to config.sls
2014-03-17 16:17:04 -06:00
351a6b81dc
Merge remote-tracking branch 'origin/pr/3'
...
Conflicts:
openssh/files/sshd_config
openssh/init.sls
pillar.example
2014-03-17 16:14:17 -06:00
e2cddca13e
Reverted the namespace change to avoid conflicts and backward incompatibilities
2014-02-09 23:42:52 +01:00
47211d0648
Added support to manage ssh certificates
2014-02-09 23:38:30 +01:00
6e418aa945
added a state that installs the openssh client
2014-01-18 05:00:20 -08:00
b0c7009cb2
updated sshd_config file to be populated by pillar
2014-01-09 05:03:44 -08:00
9f70270643
explicitly set the user, group, and mode to match the package's
...
sshd_config
2014-01-09 04:57:00 -08:00
dc53d0c295
fixed the name of the service that the openssh config is watched by
2014-01-09 04:54:49 -08:00
07771c0ebf
Split the sshd_config and banner components into sub-states
2014-01-03 18:32:05 -08:00
0a2468d87a
created a map.jinja and updated openssh state to use those values
2014-01-03 16:54:51 -08:00
2e229681c7
Adding a small variable to the OpenSSH sshd_config file so that the service will work correctly on Centos 6.4 and earlier
2014-01-03 00:11:17 -06:00
d35929876f
Modifying OpenSSH formula service name on RedHat since it is called 'sshd', not 'ssh'
2014-01-02 23:50:59 -06:00
92ac8a32aa
Modifying OpenSSH formula state to populate public/private DSA and RSA keys based on pillar data
2014-01-02 22:34:48 -06:00
90ce0d262f
Specify the service name for ssh
...
Current code was asking for service 'openssh' which does not exist. It is 'ssh'. Specifying a name in the `service.running` block fixes this.
2013-12-05 05:57:21 -07:00
1224ee95f0
Add openssh files
2013-06-13 11:16:18 -06:00
Pandu E Poluan
Brian Jackson
Eric Cook
Simon Pirschel
Forrest
omltorg
Johannes Löthberg
Mathieu POTIER
Lev Lozhkin
Jonathon Anderson
Niels Abspoel
Matthieu DERASSE
llua
Wolodja Wentland
Simon Lloyd
Theo Chatzimichos
Nigel Sim
ketzacoatl
ek9
abednarik
Bogdan Radulescu
René Jochum
elfixit
Ingo Bente
Thomas Juberg
Imran Haider
jvblasco
Raphaël Hertzog
Marc Schiffbauer
Bernd Schlapsi
Bohdan Kmit
Franz Pletz
Nitin Madhok
Skyler Berg
Tim Jones
Robert Fairburn
Alan Pearce
Alan Pearce
Wes Turner
Oleg Tsarev
Seth House
matthew-parlette
Carlos Perelló Marín
Kenny Do
Mark Eggert
brandonparsons
Thomas S Hatch