saltstack-formulas/openssh-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
177 Commits 3 Branches 27 Tags 875 KiB
c03e29a498
Commit Graph

177 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
ek9
c03e29a498 remove Kex,MACs,Ciphers from defaults 2017-02-24 21:13:35 +01:00
ek9
f192b91192 add more verbose warnings regarding ssh_config in pillar.example 2017-02-24 20:17:36 +01:00
ek9
f5a74f3fa0 defaults: enable secure defaults on sshd_config 2017-02-19 14:45:12 +01:00
ek9
ec796662bc pillar.example: update with secure defaults for sshd_config and ssh_config 2017-02-19 14:44:56 +01:00
ek9
d6e48f2b43 rebase based on latest update 2017-02-07 19:45:59 +01:00
Javier Bértoli
2db9253c45 Merge pull request #82 from pepoluan/allow_list_or_string 
Allow list or string for some option, and setting of ConfigBanner
 2017-02-07 07:26:44 -03:00
Javier Bértoli
893b96d023 Merge pull request #83 from llua/redhat 
setup sftp correctly on RedHat-like machines
 2017-01-24 20:55:17 -03:00
Eric Cook
f4ea96f9c1 setup sftp correctly on RedHat-like machines 2017-01-24 18:17:15 -05:00
Pandu E Poluan
18e1866ac5 Update pillar.example 
`pillar.example` now contains information on how to use the
'string-or-list' feature for some options.

Also an explanation on the new `ConfigBanner` option.
 2017-01-24 01:43:04 +07:00
Pandu E Poluan
773d9ae092 Apply string-or-list processing to ssh_config 
Now ssh_config also accepts string-or-list options, for serveral
keywords.
 2017-01-24 01:34:24 +07:00
Pandu E Poluan
30648d115e Add macro to handle string or list 
Added a macro to handle multivalue options entered in either string
format or list format (with auto joiner).
 2017-01-24 01:17:51 +07:00
Brian Jackson
b9689cedff Merge pull request #79 from leansalt/server-service-control 
Add ability to control SSH server service status (default: on)
 2017-01-15 21:48:04 -08:00
Florian Ermisch
bff3e5d199 Merge pull request #80 from llua/use_pam 
do not set UsePAM on OpenBSD
 2017-01-15 12:04:07 +01:00
Eric Cook
686fc2c4ee do not set UsePAM on OpenBSD 
Upstream opensshd does not support PAM
 2017-01-14 18:38:37 -05:00
Forrest
086937b84f Merge pull request #76 from freach/master 
openssh.auth will produce invalid SLS definition if sshd_config configs are missing
 2016-11-02 09:06:07 -07:00
Simon Pirschel
1b69ecab2c fix issue with stripping new line will result in invalid SLS definition if AuthorizedKeysFile is missing in sshd_config 2016-11-02 15:21:50 +01:00
Forrest
0c06e247d5 Merge pull request #75 from freach/master 
sshd won't start if AddressFamily option is specified
 2016-11-01 09:09:49 -07:00
Simon Pirschel
2a1b8fbc66 fix issue sshd won't start if AddressFamily is specified, because it must be defined before ListenAddress 2016-11-01 13:24:30 +01:00
Forrest
ec663a6f5e Merge pull request #51 from mathieupotier/master 
Put ssh keys on configured path in sshd_config (AuthorizedKeysFile)
 2016-10-31 09:32:50 -07:00
Forrest
263575e57e Merge pull request #74 from llua/arch_sftp 
fix Subsystem directive on archlinux
 2016-10-29 21:15:46 -07:00
Eric Cook
51fd8b1391 fix Subsystem directive on archlinux 2016-10-30 00:06:02 -04:00
Forrest
8c1d02f249 Merge pull request #73 from omltorg/updated_archlinux_pkg_name 
Update name of package containing dig on ArchLinux
 2016-10-14 16:17:59 -07:00
omltorg
de66dbee97 Update name of package containing dig on ArchLinux 2016-10-14 22:25:56 +00:00
Forrest
8d1e730907 Merge pull request #72 from kyrias/AuthKeysCmd 
Add AuthorizedKeysCommand support
 2016-10-02 11:59:37 -07:00
Johannes Löthberg
a74d859992 Add AuthorizedKeysCommand to pillar.example 
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
 2016-10-02 10:37:11 +02:00
Johannes Löthberg
02b52fa7cf Add AuthorizedKeysCommand support 
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
 2016-10-01 20:53:44 +02:00
Forrest
329a762e01 Merge pull request #71 from BT-dschleich/patch-1 
Fix mine function example in README.rst
 2016-09-08 09:11:50 -07:00
Dominik Schleich
7113243334 Fix mine function example in README.rst 
like it was already done in the pillar.example in this PR https://github.com/saltstack-formulas/openssh-formula/pull/36 to avoid confusions.
 2016-09-08 13:28:22 +02:00
Mathieu POTIER
760a2ad277 fix the path to authkeys 
Allow user to specify aliased path (with %u)
 2016-08-02 09:54:46 +02:00
Mathieu POTIER
4c814843f8 Merge remote-tracking branch 'refs/remotes/saltstack-formulas/master' 2016-08-02 09:46:08 +02:00
Forrest
5e979f3843 Merge pull request #69 from pepoluan/pepoluan-moduli_pull 
Allow moduli to be pulled as file
 2016-08-01 10:14:30 -07:00
Pandu E Poluan
11ba2acea7 Give information on using moduli_source 
Give additional comments to inform that moduli can also be provided via a file, using the moduli_source key.
 2016-08-02 00:03:14 +07:00
Pandu E Poluan
e6603ae62a Allow moduli to be pulled as file 
Added Jinja logic to allow the option to pull the moduli from an online source.
 2016-08-01 23:59:11 +07:00
Forrest
8ea31fd661 Merge pull request #68 from levlozhkin/master 
Convert dig exist check to unless req to remove spurious change in report
 2016-07-19 13:46:56 -07:00
Lev Lozhkin
781be61881 Convert dig exist check to unless req 2016-07-19 13:23:48 -07:00
Niels Abspoel
7eefd1a0f1 Merge pull request #67 from anderbubble/redhat-openssh-cl 
Correct openssh-clients package name for Red Hat
 2016-07-04 22:08:04 +02:00
Jonathon Anderson
87057c7c6b Correct openssh-clients package name for Red Hat 2016-07-01 23:53:00 -06:00
Wolodja Wentland
118577283a Merge pull request #65 from aboe76/more_authentication_options 
add more authentication options
 2016-05-26 22:04:16 +02:00
Niels Abspoel
641851632f add more authentication options 2016-05-26 21:57:02 +02:00
Niels Abspoel
e6657df0d8 Merge pull request #64 from Atomics/master 
Implement Session idle time out
 2016-05-25 09:55:16 +02:00
Matthieu DERASSE
3542a1f534 Implement Session idle time out 2016-05-25 00:06:45 +02:00
Forrest
22037f7b8b Merge pull request #63 from llua/arch_bind_utils 
set dig_pkg on arch linux for issue #59
 2016-05-09 20:52:42 -07:00
Forrest
6f9c7b7dba Merge pull request #62 from llua/patch-1 
add OpenBSD to map.jinja
 2016-05-09 20:52:07 -07:00
Eric Cook
dfb04a43b4 set dig_pkg on arch linux for issue #59 2016-05-09 23:47:57 -04:00
llua
bd8d46d784 add OpenBSD to map.jinja 2016-05-09 23:44:20 -04:00
Forrest
f7c84783f0 Merge pull request #61 from babilen/relax-ssh-defaults 
Drop overly biased ssh_config defaults
 2016-05-04 12:32:48 -07:00
Wolodja Wentland
49923a6371 Drop overly opinionated ssh_config defaults 
This set of options reflect the ssh_config options that are set by
default on Debian. The way this was set before has the potential to
break exisisting setups that rely on "normal" defaults, rather than the
rather opinionated ones that are now being shipped with this formula.
 2016-05-04 18:25:01 +02:00
Forrest
d3ac3734f4 Merge pull request #58 from smlloyd/master 
Add sshd_config to map.jinja, and only install dig package if dig command not found.
 2016-04-18 18:13:49 -07:00
Simon Lloyd
daed52de19 Add sshd_config to map.jinja and check if dig command is available before installing 'dig' package. 2016-04-19 02:53:14 +02:00
Niels Abspoel
a85c19c256 Merge pull request #57 from tampakrap/fix_subsystem_sftp_path_for_sle 
Fix the default Subystem sftp-server path for SLE
 2016-03-23 14:52:52 +01:00