####Table of Contents
- Overview - What is the SSH module?
- Module Description - What does the module do?
- Setup - The basics of getting started with SSH
- Usage - The classes, defined types, and their parameters available for configuration
- Limitations - OS compatibility, etc.
The SSH module installs, configures, and manages SSH.
The SSH module handles installing and configuring SSH across a range of operating systems and distributions.
- Installing SSH
- /etc/ssh/sshd_config
Getting started with this module is as simple as specifying the following in your manifest:
class { 'ssh': }If you would like to customize your /etc/sshd_config a bit, here is a brief example using 2 parameters:
class { 'ssh': permitrootlogin => 'no', banner => '/etc/issue.net' }The following parameters are available in the ssh module:
- port
- addressfamily
- listenaddress
- protocol
- keyregenerationinterval
- serverkeybits
- syslogfacility
- loglevel
- logingracetime
- permitrootlogin
- strictmodes
- maxauthtries
- maxsessions
- rsaauthentication
- pubkeyauthentication
- authorizedkeysfile
- authorizedkeyscommand
- authorizedkeyscommandrunas
- rhostsrsaauthentication
- hostbasedauthentication
- ignoreuserknownhosts
- ignorerhosts
- permitemptypasswords
- passwordauthentication
- challengeresponseauthentication
- kerberosauthentication
- kerberosorlocalpasswd
- kerberosticketcleanup
- kerberosgetafstoken
- kerberosusekuserok
- gssapiauthentication
- gssapicleanupcredentials
- gssapistrictacceptorcheck
- gssapikeyexchange
- usepam
- allowagentforwarding
- allowtcpforwarding
- gatewayports
- x11forwarding
- x11displayoffset
- x11uselocalhost
- printmotd
- printlastlog
- tcpkeepalive
- uselogin
- useprivilegeseparation
- permituserenvironment
- compression
- clientaliveinterval
- clientalivecountmax
- showpatchlevel
- usedns
- pidfile
- maxstartups
- permittunnel
- chrootdirectory
- banner
This module has been built and tested against Puppet 3.0 and higher.
The module has been tested on:
- RedHat Enterprise Linux 6
- CentOS 6
- Ubuntu 12.04
Testing on other platforms has been light and cannot be guaranteed.