Page Menu
Home
Software Heritage
Search
Configure Global Search
Log In
Files
F8394646
params.pp
No One
Temporary
Actions
Download File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Size
7 KB
Subscribers
None
params.pp
View Options
class
ssh
::
params
{
case
$::osfamily
{
'Debian'
:
{
$server_package_name
=
'openssh-server'
$client_package_name
=
'openssh-client'
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'ssh'
$sftp_server_path
=
'/usr/lib/openssh/sftp-server'
$host_priv_key_group
=
'root'
}
'RedHat'
:
{
$server_package_name
=
'openssh-server'
$client_package_name
=
'openssh-clients'
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'sshd'
$sftp_server_path
=
'/usr/libexec/openssh/sftp-server'
if
versioncmp
(
$::operatingsystemmajrelease,
'7'
)
>=
0
{
$host_priv_key_group
=
'ssh_keys'
}
else
{
$host_priv_key_group
=
'root'
}
}
'FreeBSD'
,
'DragonFly'
:
{
$server_package_name
=
undef
$client_package_name
=
undef
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'sshd'
$sftp_server_path
=
'/usr/libexec/sftp-server'
$host_priv_key_group
=
'root'
}
'OpenBSD'
:
{
$server_package_name
=
undef
$client_package_name
=
undef
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'sshd'
$sftp_server_path
=
'/usr/libexec/sftp-server'
$host_priv_key_group
=
'root'
}
'Darwin'
:
{
$server_package_name
=
undef
$client_package_name
=
undef
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'com.openssh.sshd'
$sftp_server_path
=
'/usr/libexec/sftp-server'
$host_priv_key_group
=
'root'
}
'ArchLinux'
:
{
$server_package_name
=
'openssh'
$client_package_name
=
'openssh'
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'sshd.service'
$sftp_server_path
=
'/usr/lib/ssh/sftp-server'
$host_priv_key_group
=
'root'
}
'Suse'
:
{
$server_package_name
=
'openssh'
$client_package_name
=
'openssh'
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$host_priv_key_group
=
'root'
case
$::operatingsystem
{
'SLES'
:
{
$service_name
=
'sshd'
# $::operatingsystemmajrelease isn't available on e.g. SLES 10
case
$::operatingsystemrelease
{
/
^
10
\.
/
,
/
^
11
\.
/
:
{
if
(
$::architecture
==
'x86_64'
)
{
$sftp_server_path
=
'/usr/lib64/ssh/sftp-server'
}
else
{
$sftp_server_path
=
'/usr/lib/ssh/sftp-server'
}
}
default
:
{
$sftp_server_path
=
'/usr/lib/ssh/sftp-server'
}
}
}
'OpenSuse'
:
{
$service_name
=
'sshd'
$sftp_server_path
=
'/usr/lib/ssh/sftp-server'
}
default
:
{
fail
(
"Unsupported platform: ${::osfamily}/${::operatingsystem}"
)
}
}
}
'Solaris'
:
{
case
$::operatingsystem
{
'SmartOS'
:
{
$server_package_name
=
undef
$client_package_name
=
undef
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'svc:/network/ssh:default'
$sftp_server_path
=
'internal-sftp'
$host_priv_key_group
=
'root'
}
default
:
{
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'svc:/network/ssh:default'
$sftp_server_path
=
'internal-sftp'
$host_priv_key_group
=
'root'
case
versioncmp
(
$::kernelrelease,
'5.10'
)
{
1
:
{
# Solaris 11 and later
$server_package_name
=
'/service/network/ssh'
$client_package_name
=
'/network/ssh'
}
0
:
{
# Solaris 10
$server_package_name
=
'SUNWsshdu'
$client_package_name
=
'SUNWsshu'
}
default
:
{
# Solaris 9 and earlier not supported
fail
(
"Unsupported platform: ${::osfamily}/${::kernelrelease}"
)
}
}
}
}
}
default
:
{
case
$::operatingsystem
{
'Gentoo'
:
{
$server_package_name
=
'openssh'
$client_package_name
=
'openssh'
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'sshd'
$sftp_server_path
=
'/usr/lib/misc/sftp-server'
$host_priv_key_group
=
'root'
}
'Amazon'
:
{
$server_package_name
=
'openssh-server'
$client_package_name
=
'openssh-clients'
$sshd_dir
=
'/etc/ssh'
$sshd_config
=
'/etc/ssh/sshd_config'
$ssh_config
=
'/etc/ssh/ssh_config'
$ssh_known_hosts
=
'/etc/ssh/ssh_known_hosts'
$service_name
=
'sshd'
$sftp_server_path
=
'/usr/libexec/openssh/sftp-server'
$host_priv_key_group
=
'root'
}
default
:
{
fail
(
"Unsupported platform: ${::osfamily}/${::operatingsystem}"
)
}
}
}
}
# ssh & sshd default options:
# - OpenBSD doesn't know about UsePAM
# - Sun_SSH doesn't know about UsePAM & AcceptEnv; SendEnv & HashKnownHosts
case
$::osfamily
{
'OpenBSD'
:
{
$sshd_default_options
=
{
'ChallengeResponseAuthentication'
=>
'no'
,
'X11Forwarding'
=>
'yes'
,
'PrintMotd'
=>
'no'
,
'AcceptEnv'
=>
'LANG LC_*'
,
'Subsystem'
=>
"sftp ${sftp_server_path}"
,
}
$ssh_default_options
=
{
'Host *'
=>
{
'SendEnv'
=>
'LANG LC_*'
,
'HashKnownHosts'
=>
'yes'
,
},
}
}
'Solaris'
:
{
$sshd_default_options
=
{
'ChallengeResponseAuthentication'
=>
'no'
,
'X11Forwarding'
=>
'yes'
,
'PrintMotd'
=>
'no'
,
'Subsystem'
=>
"sftp ${sftp_server_path}"
,
'HostKey'
=>
[
"${sshd_dir}/ssh_host_rsa_key"
,
"${sshd_dir}/ssh_host_dsa_key"
,
],
}
$ssh_default_options
=
{
}
}
default
:
{
$sshd_default_options
=
{
'ChallengeResponseAuthentication'
=>
'no'
,
'X11Forwarding'
=>
'yes'
,
'PrintMotd'
=>
'no'
,
'AcceptEnv'
=>
'LANG LC_*'
,
'Subsystem'
=>
"sftp ${sftp_server_path}"
,
'UsePAM'
=>
'yes'
,
}
$ssh_default_options
=
{
'Host *'
=>
{
'SendEnv'
=>
'LANG LC_*'
,
'HashKnownHosts'
=>
'yes'
,
},
}
}
}
$validate_sshd_file
=
false
$user_ssh_directory_default_mode
=
'0700'
$user_ssh_config_default_mode
=
'0600'
$collect_enabled
=
true
# Collect sshkey resources
$issue_net
=
'/etc/issue.net'
}
File Metadata
Details
Attached
Mime Type
text/x-c++
Expires
Jun 4 2025, 7:27 PM (9 w, 5 d ago)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3305791
Attached To
rSPSSH puppet-saz-ssh
Event Timeline
Log In to Comment