This class installs openssh.
$permitrootlogin = 'without-password' | 'no' | 'yes'
# defaults to no
Ensures that the openssh package is installed and distributes a config file. /etc/ssh/sshd_config
Package["openssh"]
node default {
class { 'ssh': } # accept default param OR
class { 'ssh': permitrootlogin => 'without-password' } # override paramater
}