ncsa/puppet-sshd

Convenience classes for common ssh access patterns.

sshd

Manage base sshd_config settings and allow_ssh access for users and groups from specified sources.

Dependencies

• herculesteam/augeasfacter
• herculesteam/augeasproviders
• MiamiOH/pam_access
• ncsa/puppet-sssd
• puppetlabs/firewall

Reference

REFERENCE.md

define sshd::allow_from (

• Array[ String, 1 ] $hostlist,
• Array[ String ] $users = [],
• Array[ String ] $groups = [],
• Hash[ String, Data ] $additional_match_params = {},

class sshd (

• Hash $allow_list,
• Boolean $banner_ignore,
• Hash $config,
• String $config_file,
• Hash[String,Hash] $config_matches,
• Hash $config_subsystems,
• Boolean $manage_service,
• Array[String] $required_packages, #per OS
• Array[String] $revoked_keys,
• String $revoked_keys_file, #per OS
• String $service_name,
• Array $trusted_subnets,
• Optional[String] $banner = undef,