From 29e7f1e16c210a61eb4bac6107e6b2c391916a00 Mon Sep 17 00:00:00 2001 From: Konrad Bucheli Date: Wed, 19 Apr 2023 11:15:18 +0200 Subject: [PATCH] update ssh_client documentation --- admin-guide/puppet/profiles/ssh_client.rst | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/admin-guide/puppet/profiles/ssh_client.rst b/admin-guide/puppet/profiles/ssh_client.rst index 53803f9c..72d3bd90 100644 --- a/admin-guide/puppet/profiles/ssh_client.rst +++ b/admin-guide/puppet/profiles/ssh_client.rst @@ -12,19 +12,12 @@ Parameters ====================== ======== ============================================= **Name** **Type** **Default** ---------------------- -------- --------------------------------------------- -allowed_hosts string '\*.psi.ch' -canonicalize_hostname bool false -forward_x11 bool +canonicalize_hostname bool hiera('ssh_client::canonicalize_hostname') +forward_x11 bool hiera('ssh_client::forward_x11') +try_host_trust bool hiera('ssh_client::try_host_trust', false) ====================== ======== ============================================= -``allowed_hosts`` -~~~~~~~~~~~~~~~~~ - -A string specifying which hosts are allowed to SSH to this machine. By default, -all PSI hosts will be able to connect. - - ``canonicalize_hostname`` ~~~~~~~~~~~~~~~~~~~~~~~~~ @@ -36,3 +29,9 @@ Determines whether or not hostnames are canonicalized for ``psi.ch``. See ~~~~~~~~~~~~~~ Determines whether ``ForwardX11`` and ``ForwardX11Trusted`` should be enabled. + + +``try_host_trust`` +~~~~~~~~~~~~~~~~~ + +Determines whether the ssh client attemps to authenticate using `HostbasedAuthentication``