``profile::ssh_client``
=======================

This profile configures '/etc/ssh/ssh_known_hosts' :manpage:`sshd(8)`.
PSI CA key is added to the 'ssh_known_hosts', in this manner we allow
PSI servers to SSH to this host.


Parameters
----------

======================  ========  =============================================
**Name**                **Type**  **Default**
----------------------  --------  ---------------------------------------------
canonicalize_hostname   bool      hiera('ssh_client::canonicalize_hostname')
forward_x11             bool      hiera('ssh_client::forward_x11')
try_host_trust          bool      hiera('ssh_client::try_host_trust', false)
======================  ========  =============================================


``canonicalize_hostname``
~~~~~~~~~~~~~~~~~~~~~~~~~

Determines whether or not hostnames are canonicalized for ``psi.ch``. See
:manpage:`ssh_config(5)` for details.


``foward_x11``
~~~~~~~~~~~~~~

Determines whether ``ForwardX11`` and ``ForwardX11Trusted`` should be enabled.


``try_host_trust``
~~~~~~~~~~~~~~~~~~

Determines whether the ssh client attemps to authenticate using `HostbasedAuthentication``