38 lines
1.1 KiB
ReStructuredText
38 lines
1.1 KiB
ReStructuredText
``profile::ssh_client``
|
|
=======================
|
|
|
|
This profile configures '/etc/ssh/ssh_known_hosts' :manpage:`sshd(8)`.
|
|
PSI CA key is added to the 'ssh_known_hosts', in this manner we allow
|
|
PSI servers to SSH to this host.
|
|
|
|
|
|
Parameters
|
|
----------
|
|
|
|
====================== ======== =============================================
|
|
**Name** **Type** **Default**
|
|
---------------------- -------- ---------------------------------------------
|
|
canonicalize_hostname bool hiera('ssh_client::canonicalize_hostname')
|
|
forward_x11 bool hiera('ssh_client::forward_x11')
|
|
try_host_trust bool hiera('ssh_client::try_host_trust', false)
|
|
====================== ======== =============================================
|
|
|
|
|
|
``canonicalize_hostname``
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
Determines whether or not hostnames are canonicalized for ``psi.ch``. See
|
|
:manpage:`ssh_config(5)` for details.
|
|
|
|
|
|
``foward_x11``
|
|
~~~~~~~~~~~~~~
|
|
|
|
Determines whether ``ForwardX11`` and ``ForwardX11Trusted`` should be enabled.
|
|
|
|
|
|
``try_host_trust``
|
|
~~~~~~~~~~~~~~~~~~
|
|
|
|
Determines whether the ssh client attemps to authenticate using `HostbasedAuthentication``
|