how to add aliases to ssh host key certificate

2023-02-27 10:18:22 +01:00
parent c3a7fc1769
commit 1ef3c80d94
1 changed files with 15 additions and 2 deletions
@@ -15,10 +15,12 @@ enable_gssapi         bool      hiera('ssh_server::enable_gssapi')
 permit_root_login     string    hiera('ssh_server::permit_root_login')
 trusted_user_ca_keys  list      hiera('ssh_server::trusted_user_ca_keys', [])
 user_ca_keys          hash      hiera('ssh_server::user_ca_keys', {})
+banner_file           string    hiera('ssh_server::banner_file', undef),
+aliases               list      hiera_array('ssh_server::aliases', []),
 ====================  ========  =============================================

-``enable_gssapi``
-~~~~~~~~~~~~~~~~~
+``enable_public_key``
+~~~~~~~~~~~~~~~~~~~~~

 A boolean determining whether public key authentication is enabled or not for normal users.

@@ -48,3 +50,14 @@ An array containing the user CA keys that will be accepted (as understood by the
 ~~~~~~~~~~~~~~~~

 A hash containing the actual keys to be referenced by `trusted_user_ca_keys`_.
+
+``banner_file``
+~~~~~~~~~~~~~~~
+
+Where to find a custom banner file on the system.
+
+``aliases``
+~~~~~~~~~~~
+
+Adds alternative names/aliases under which this system can be reached too to the principal list of the SSH server host key certificate.
+