"merged" admin-guide

2021-05-05 14:24:27 +02:00
parent 296ecb3f26
commit c488e8de62
182 changed files with 17246 additions and 5 deletions
@@ -0,0 +1,42 @@
+``profile::ssh_server``
+=======================
+
+This profile configures :manpage:`sshd(8)`.
+
+
+Parameters
+----------
+
+====================  ========  =============================================
+**Name**              **Type**  **Default**
+--------------------  --------  ---------------------------------------------
+enable_gssapi         bool      hiera('ssh_server::enable_gssapi')
+permit_root_login     string    hiera('ssh_server::permit_root_login')
+trusted_user_ca_keys  list      hiera('ssh_server::trusted_user_ca_keys', [])
+user_ca_keys          hash      hiera('ssh_server::user_ca_keys', {})
+====================  ========  =============================================
+
+
+``enable_gssapi``
+~~~~~~~~~~~~~~~~~
+
+A boolean determining whether GSSAPI authentication is enabled or not.
+
+
+``permit_root_login``
+~~~~~~~~~~~~~~~~~~~~~
+
+Sets ``PermitRootLogin`` in the sshd configuration file.
+
+
+``trusted_user_ca_keys``
+~~~~~~~~~~~~~~~~~~~~~~~~
+
+An array containing the user CA keys that will be accepted (as understood by the
+``TrustedUserCAKeys`` directive in :manpage:`sshd_config(5)`).
+
+
+``user_ca_keys``
+~~~~~~~~~~~~~~~~
+
+A hash containing the actual keys to be referenced by `trusted_user_ca_keys`_.