.travis.yml

@@ -27,7 +27,7 @@ env:
 
 sudo: false
 
-script: 'bundle exec metadata-json-lint metadata.json && bundle exec rake validate && bundle exec rake lint && SPEC_OPTS="--format documentation" bundle exec rake spec'
+script: 'bundle exec rake validate && bundle exec rake lint && SPEC_OPTS="--format documentation" bundle exec rake spec'
 
 matrix:
   fast_finish: true

CHANGELOG

@@ -1,2 +1,4 @@
+3.38.0 - 2016-06-06
+
 2.0.0 - 2013-05-16 Garrett Honeycutt <code@garretthoneycutt.com>
 * Rebirth

Gemfile

@@ -7,7 +7,7 @@ else
 end
 
 gem 'metadata-json-lint'
-gem 'puppetlabs_spec_helper', '>= 0.1.0'
+gem 'puppetlabs_spec_helper', '>= 1.1.1'
 gem 'facter', '>= 1.7.0'
 gem 'rspec-puppet'
 gem 'puppet-lint', :git => 'https://github.com/rodjek/puppet-lint.git'

README.md

@@ -204,6 +204,12 @@ LogLevel option in sshd_config. Acceptable values are QUIET, FATAL, ERROR, INFO,
 
 - *Default*: 'INFO'
 
+sshd_config_maxauthtries
+---------------
+MaxAuthTries option in sshd_config.  Specifies the maximum number of authentication attempts permitted per connection.  Once the number of failures reaches half this value, additional failures are logged.
+
+- *Default*: '6'
+
 sshd_config_mode
 ---------------
 sshd_config's mode. The default is '0600' on Linux and '0644' on Solaris.

manifests/init.pp

@@ -52,6 +52,7 @@
   $sshd_config_allowusers              = [],
   $sshd_config_denygroups              = [],
   $sshd_config_denyusers               = [],
+  $sshd_config_maxauthtries            = undef,
   $sshd_config_maxstartups             = undef,
   $sshd_config_maxsessions             = undef,
   $sshd_config_chrootdirectory         = undef,
@@ -513,6 +514,12 @@
     validate_string($sshd_config_authkey_location)
   }
 
+  if $sshd_config_maxauthtries != undef {
+    if is_integer($sshd_config_maxauthtries) == false {
+      fail("ssh::sshd_config_maxauthtries must be a valid number and is set to <${sshd_config_maxauthtries}>.")
+    }
+  }
+
   if $sshd_config_maxstartups != undef {
     validate_re($sshd_config_maxstartups,'^(\d+)+(\d+?:\d+?:\d+)?$',
       "ssh::sshd_config_maxstartups may be either an integer or three integers separated with colons, such as 10:30:100. Detected value is <${sshd_config_maxstartups}>.")

metadata.json

@@ -1,6 +1,6 @@
 {
   "name": "ghoneycutt-ssh",
-  "version": "3.37.1",
+  "version": "3.38.0",
   "author": "ghoneycutt",
   "summary": "Manages SSH",
   "license": "Apache-2.0",

spec/classes/init_spec.rb

@@ -466,6 +466,7 @@
     it { should contain_file('sshd_config').with_content(/^HostKey \/etc\/ssh\/ssh_host_rsa_key/) }
     it { should contain_file('sshd_config').with_content(/^HostKey \/etc\/ssh\/ssh_host_dsa_key/) }
     it { should contain_file('sshd_config').with_content(/^StrictModes yes$/) }
+    it { should_not contain_file('sshd_config').with_content(/^MaxAuthTries/) }
     it { should_not contain_file('sshd_config').with_content(/^MaxStartups/) }
     it { should_not contain_file('sshd_config').with_content(/^MaxSessions/) }
     it { should contain_file('sshd_config').with_content(/^AuthorizedKeysCommand \/path\/to\/command$/) }
@@ -2046,6 +2047,27 @@
     end
   end
 
+  describe 'with paramter sshd_config_maxauthtries specified'  do
+    let :facts do
+      default_facts.merge(
+        {
+        }
+      )
+    end
+    context 'as a valid integer' do
+     let(:params) { { :sshd_config_maxauthtries => 6}}
+     it { should contain_file('sshd_config').with_content(/^MaxAuthTries 6$/)}
+    end
+    context 'as an invalid type' do
+      let(:params) {{ :sshd_config_maxauthtries => 'BOGUS'}}
+      it 'should fail' do
+        expect{
+          should contain_class('ssh')
+        }.to raise_error(Puppet::Error,/ssh::sshd_config_maxauthtries must be a valid number and is set to <BOGUS>\./)
+      end
+    end
+ end
+
   describe 'with parameter sshd_config_maxstartups specified' do
     let :facts do
       default_facts.merge(

templates/sshd_config.erb

@@ -62,6 +62,9 @@ PermitRootLogin <%= @permit_root_login %>
 StrictModes <%= @sshd_config_strictmodes %>
 <% end -%>
 #MaxAuthTries 6
+<% if @sshd_config_maxauthtries %>
+MaxAuthTries <%= @sshd_config_maxauthtries %>
+<% end -%>
 
 #RSAAuthentication yes
 #PubkeyAuthentication yes