search

ComputeCanada / puppet-magic_castle

Puppet Environment repo for Magic Castle - https://github.com/ComputeCanada/magic_castle
MIT License
13 stars 21 forks source link

use sshd_config provider instead of file_line for UseDNS and HostbasedAuthentication #367

Closed mboisson closed 5 months ago

mboisson commented 5 months ago

Otherwise, and since https://github.com/ComputeCanada/puppet-magic_castle/pull/340 was merged, we get things like

Jun 14 18:00:28 node1.int.archimedes.c3.ca puppet-agent[8395]: (/Stage[main]/Profile::Ssh::Base/Service[sshd]) Jun 14 18:00:28 node1.int.archimedes.c3.ca sshd[8657]: /etc/ssh/sshd_config line 137: Directive 'UseDNS' is not allowed within a Match block

because the UseDNS and HostbasedAuthentication appear at the end of the sshd_config file, instead of having the Match blocks at the end of the file.