diff --git a/README.md b/README.md index 2f31ce65..7c4d3bcd 100644 --- a/README.md +++ b/README.md @@ -23,9 +23,12 @@ Host entries in a personal `~/.ssh/config` file. ## Compatibility -This module officially supports the platforms listed in the -`metadata.json`. It does not fail on unsupported platforms and has been -known to work on many, many platforms since its creation in 2010. +This module officially supports the platforms listed with versions in +`metadata.json` and those are actively tested in CI. It does not fail on +unsupported platforms and has been known to work on many, many platforms +since its creation in 2010. Older platforms are no longer tested, though +their OS specific defaults are kept in `data/os/` so they continue to +work. ### Known to work diff --git a/Vagrantfile b/Vagrantfile deleted file mode 100644 index a178ca7a..00000000 --- a/Vagrantfile +++ /dev/null @@ -1,69 +0,0 @@ -# -*- mode: ruby -*- -# vi: set ft=ruby : -# -if not Vagrant.has_plugin?('vagrant-vbguest') - abort <<-EOM - -vagrant plugin vagrant-vbguest >= 0.16.0 is required. -https://github.com/dotless-de/vagrant-vbguest -To install the plugin, please run, 'vagrant plugin install vagrant-vbguest'. - - EOM -end - -# Vagrantfile API/syntax version. Don't touch unless you know what you're doing! -VAGRANTFILE_API_VERSION = "2" - -Vagrant.configure(VAGRANTFILE_API_VERSION) do |config| - - config.vm.synced_folder ".", "/vagrant", type: "virtualbox" - - config.vm.provider :virtualbox do |vb| - vb.customize ["modifyvm", :id, "--memory", "512"] - end - - # TODO: remove comments around provision once we have a clean copy of - # sshd_config and ssh_config from that platform and the platform has been - # added to the module and those spec tests work. - config.vm.define "el7-ssh", autostart: true do |c| - c.vm.box = "centos/7" - c.vm.hostname = 'el7-ssh.example.com' - c.vm.provision :shell, :path => "tests/provision.sh", :args => "el" - c.vm.provision :shell, :inline => "puppet apply /vagrant/examples/init.pp" - end - - config.vm.define "el6-ssh", autostart: false do |c| - c.vm.box = "centos/6" - c.vm.hostname = 'el6-ssh.example.com' - c.vm.provision :shell, :path => "tests/provision.sh", :args => "el" - c.vm.provision :shell, :inline => "puppet apply /vagrant/examples/init.pp" - end - - config.vm.define "debian8-ssh", autostart: false do |c| - c.vm.box = "debian/jessie64" - c.vm.hostname = 'debian8-ssh.example.com' - c.vm.provision :shell, :path => "tests/provision.sh", :args => "debian" -# c.vm.provision :shell, :inline => "puppet apply /vagrant/examples/init.pp" - end - - config.vm.define "debian9-ssh", autostart: false do |c| - c.vm.box = "debian/stretch64" - c.vm.hostname = 'debian9-ssh.example.com' - c.vm.provision :shell, :path => "tests/provision.sh", :args => "debian" -# c.vm.provision :shell, :inline => "puppet apply /vagrant/examples/init.pp" - end - - config.vm.define "ubuntu1604-ssh", autostart: false do |c| - c.vm.box = "ubuntu/xenial64" - c.vm.hostname = 'ubuntu1604-ssh.example.com' - c.vm.provision :shell, :path => "tests/provision.sh", :args => "debian" -# c.vm.provision :shell, :inline => "puppet apply /vagrant/examples/init.pp" - end - - config.vm.define "ubuntu1804-ssh", autostart: false do |c| - c.vm.box = "ubuntu/bionic64" - c.vm.hostname = 'ubuntu1804-ssh.example.com' - c.vm.provision :shell, :path => "tests/provision.sh", :args => "debian" -# c.vm.provision :shell, :inline => "puppet apply /vagrant/examples/init.pp" - end -end diff --git a/spec/classes/init_spec.rb b/spec/classes/init_spec.rb index e78d902c..a34c746a 100644 --- a/spec/classes/init_spec.rb +++ b/spec/classes/init_spec.rb @@ -16,18 +16,13 @@ packages_server = ['openssh-server'] config_files = '50-redhat' include_dir = '/etc/ssh/ssh_config.d' - when %r{Archlinux.*}, %r{SLED.*}, %r{SLES.*} + when %r{Archlinux.*} packages_client = ['openssh'] packages_server = [] when %r{Debian-13}, %r{Ubuntu-(22.04|24.04|26.04)} packages_client = ['openssh-client'] packages_server = ['openssh-server'] include_dir = '/etc/ssh/ssh_config.d' - # Kept in to exercise parameters only used by Solaris - when %r{Solaris-11.*} - packages_client = ['network/ssh', 'network/ssh/ssh-key'] - packages_server = ['service/network/ssh'] - packages_ssh_source = nil end describe "on #{os} with default values for parameters" do @@ -41,7 +36,7 @@ is_expected.to contain_package(package).only_with( { 'ensure' => 'installed', - 'source' => packages_ssh_source, + 'source' => nil, 'adminfile' => nil, 'before' => 'File[ssh_config]', }, diff --git a/spec/classes/server_spec.rb b/spec/classes/server_spec.rb index b669a4f1..843334df 100644 --- a/spec/classes/server_spec.rb +++ b/spec/classes/server_spec.rb @@ -36,24 +36,12 @@ packages = ['openssh-server'] service_hasstatus = true service_name = 'sshd' - when %r{SLED.*}, %r{SLES.*} - config_mode = '0600' - packages = [] - service_name = 'sshd' - service_hasstatus = true when %r{Debian-13}, %r{Ubuntu-(22.04|24.04|26.04)} config_mode = '0600' packages = ['openssh-server'] service_hasstatus = true service_name = 'ssh' include_dir = '/etc/ssh/sshd_config.d' - # Kept in to exercise parameters only used by Solaris - when %r{Solaris-11.*} - config_mode = '0644' - packages = ['service/network/ssh'] - packages_source = nil - service_hasstatus = true - service_name = 'ssh' end it { is_expected.to compile.with_all_deps } @@ -64,7 +52,7 @@ is_expected.to contain_package(package).only_with( { 'ensure' => 'installed', - 'source' => packages_source, + 'source' => nil, 'adminfile' => nil, 'before' => 'File[sshd_config]', }, diff --git a/spec/fixtures/hiera/hieradata/fqdn/hieramerge.example.com.yaml b/spec/fixtures/hiera/hieradata/fqdn/hieramerge.example.com.yaml deleted file mode 100644 index 77482139..00000000 --- a/spec/fixtures/hiera/hieradata/fqdn/hieramerge.example.com.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -ssh::sshd_config_allowgroups: - - allowgroup_from_fqdn -ssh::sshd_config_allowusers: - - allowuser_from_fqdn -ssh::sshd_config_denygroups: - - denygroup_from_fqdn -ssh::sshd_config_denyusers: - - denyuser_from_fqdn -ssh::config_entries: - 'user_from_fqdn': - owner: 'fqdn_user' - group: 'fqdn_user' - path: '/home/fqdn_user/.ssh/config' - host: 'fqdn_host.example.local' diff --git a/spec/fixtures/hiera/hieradata/specific/test_hiera_merge.yaml b/spec/fixtures/hiera/hieradata/specific/test_hiera_merge.yaml deleted file mode 100644 index ea223731..00000000 --- a/spec/fixtures/hiera/hieradata/specific/test_hiera_merge.yaml +++ /dev/null @@ -1,15 +0,0 @@ ---- -ssh::sshd_config_allowgroups: - - allowgroup_from_fact -ssh::sshd_config_allowusers: - - allowuser_from_fact -ssh::sshd_config_denygroups: - - denygroup_from_fact -ssh::sshd_config_denyusers: - - denyuser_from_fact -ssh::config_entries: - 'user_from_fact': - owner: 'fact_user' - group: 'fact_user' - path: '/home/fact_user/.ssh/config' - host: 'fact_host.example.local' diff --git a/spec/fixtures/ssh_config_ubuntu2004 b/spec/fixtures/ssh_config_ubuntu2004 deleted file mode 100644 index 9b7f5d5d..00000000 --- a/spec/fixtures/ssh_config_ubuntu2004 +++ /dev/null @@ -1,63 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT - -# $OpenBSD: ssh_config,v 1.21 2005/12/06 22:38:27 reyk Exp $ - -# This is the ssh client system-wide configuration file. See -# ssh_config(5) for more information. This file provides defaults for -# users, and the values can be changed in per-user configuration files -# or on the command line. - -# Configuration data is parsed as follows: -# 1. command line options -# 2. user-specific file -# 3. system-wide file -# Any configuration value is only changed the first time it is set. -# Thus, host-specific definitions should be at the beginning of the -# configuration file, and defaults at the end. - -# Site-wide defaults for some commonly used options. For a comprehensive -# list of available options, their meanings and defaults, please see the -# ssh_config(5) man page. - -Include /etc/ssh/ssh_config.d/*.conf - -# Host * -# ForwardAgent no -# ForwardX11 no -# RhostsRSAAuthentication no -# RSAAuthentication yes - PasswordAuthentication yes - PubkeyAuthentication yes -# HostbasedAuthentication no -# BatchMode no -# CheckHostIP yes -# AddressFamily any -# ConnectTimeout 0 -# StrictHostKeyChecking ask -# IdentityFile ~/.ssh/identity - IdentityFile ~/.ssh/id_rsa - IdentityFile ~/.ssh/id_dsa -# Port 22 - Protocol 2 -# Cipher 3des -# Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc -# EscapeChar ~ -# Tunnel no -# TunnelDevice any:any -# PermitLocalCommand no -# HashKnownHosts no - HashKnownHosts yes - GlobalKnownHostsFile /etc/ssh/ssh_known_hosts -Host * -# GSSAPIAuthentication yes - GSSAPIAuthentication yes -# If this option is set to yes then remote X11 clients will have full access -# to the original X11 display. As virtually no X11 client supports the untrusted -# mode correctly we set this to yes. - ForwardX11Trusted yes - UseRoaming no -# Send locale-related environment variables - SendEnv LANG LANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES - SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT - SendEnv LC_IDENTIFICATION LC_ALL diff --git a/spec/fixtures/sshd_config_sles_15_x86_64 b/spec/fixtures/sshd_config_sles_15_x86_64 deleted file mode 100644 index f1a3f5a0..00000000 --- a/spec/fixtures/sshd_config_sles_15_x86_64 +++ /dev/null @@ -1,143 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT - -# $OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $ - -# This is the sshd server system-wide configuration file. See -# sshd_config(5) for more information. - -# This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin - -# The strategy used for options in the default sshd_config shipped with -# OpenSSH is to specify options with their default value where -# possible, but leave them commented. Uncommented options change a -# default value. - -#Port 22 -Port 22 -#Protocol 2,1 -Protocol 2 -#AddressFamily any -AddressFamily any - -# HostKey for protocol version 1 -#HostKey /etc/ssh/ssh_host_key -# HostKeys for protocol version 2 -#HostKey /etc/ssh/ssh_host_rsa_key -#HostKey /etc/ssh/ssh_host_dsa_key -HostKey /etc/ssh/ssh_host_rsa_key - -# Lifetime and size of ephemeral version 1 server key -#KeyRegenerationInterval 1h -#ServerKeyBits 1024 -ServerKeyBits 1024 -# Logging -# obsoletes QuietMode and FascistLogging -#SyslogFacility AUTH -SyslogFacility AUTH -#LogLevel INFO -LogLevel INFO - -# Authentication: - -#LoginGraceTime 120 -LoginGraceTime 120 -#PermitRootLogin yes -PermitRootLogin yes -#StrictModes yes -#MaxAuthTries 6 - -#RSAAuthentication yes -#PubkeyAuthentication yes -PubkeyAuthentication yes -#AuthorizedKeysFile .ssh/authorized_keys - -# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts -#RhostsRSAAuthentication no -# similar for protocol version 2 -#HostbasedAuthentication no -HostbasedAuthentication no -# Change to yes if you don't trust ~/.ssh/known_hosts for -# RhostsRSAAuthentication and HostbasedAuthentication -#IgnoreUserKnownHosts no -IgnoreUserKnownHosts no -# Don't read the user's ~/.rhosts and ~/.shosts files -#IgnoreRhosts yes -IgnoreRhosts yes - -# To disable tunneled clear text passwords, change to no here! -#PasswordAuthentication yes -PasswordAuthentication yes -#PermitEmptyPasswords no - -# Change to no to disable s/key passwords -#ChallengeResponseAuthentication yes -ChallengeResponseAuthentication yes - -# Kerberos options -#KerberosOrLocalPasswd yes -#KerberosTicketCleanup yes -#KerberosGetAFSToken no - -# GSSAPI options -#GSSAPIAuthentication no -GSSAPIAuthentication yes -#GSSAPICleanupCredentials yes -GSSAPICleanupCredentials yes - -# Set this to 'yes' to enable PAM authentication, account processing, -# and session processing. If this is enabled, PAM authentication will -# be allowed through the ChallengeResponseAuthentication mechanism. -# Depending on your PAM configuration, this may bypass the setting of -# PasswordAuthentication, PermitEmptyPasswords, and -# "PermitRootLogin without-password". If you just want the PAM account and -# session checks to run without PAM authentication, then enable this but set -# ChallengeResponseAuthentication=no -#UsePAM no -UsePAM yes - -# Accept locale-related environment variables -AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES -AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT -AcceptEnv LC_IDENTIFICATION LC_ALL -#AllowTcpForwarding yes -AllowTcpForwarding yes -#GatewayPorts no -#X11Forwarding no -X11Forwarding yes -#X11DisplayOffset 10 -#X11UseLocalhost yes -X11UseLocalhost yes -#PrintMotd yes -PrintMotd yes -#PrintLastLog yes -#TCPKeepAlive yes -TCPKeepAlive yes -#UseLogin no -#UsePrivilegeSeparation yes -#PermitUserEnvironment no -#Compression delayed -#ClientAliveInterval 0 -ClientAliveInterval 0 -ClientAliveCountMax 3 -#ShowPatchLevel no -#UseDNS yes -UseDNS yes -#PidFile /var/run/sshd.pid -#MaxStartups 10:30:100 -#MaxSessions 10 - -#PermitTunnel no -PermitTunnel no -#ChrootDirectory none - -# no default banner path -#Banner none -Banner none - -#XAuthLocation /usr/bin/xauth -XAuthLocation /usr/bin/xauth - -# override default of no subsystems -Subsystem sftp /usr/lib/ssh/sftp-server - diff --git a/spec/fixtures/sshd_config_ubuntu2004 b/spec/fixtures/sshd_config_ubuntu2004 deleted file mode 100644 index 60d8a688..00000000 --- a/spec/fixtures/sshd_config_ubuntu2004 +++ /dev/null @@ -1,138 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT - -# $OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $ - -# This is the sshd server system-wide configuration file. See -# sshd_config(5) for more information. - -# This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin - -# The strategy used for options in the default sshd_config shipped with -# OpenSSH is to specify options with their default value where -# possible, but leave them commented. Uncommented options change a -# default value. - -Include /etc/ssh/sshd_config.d/*.conf - -#Port 22 -Port 22 -#Protocol 2,1 -Protocol 2 -#AddressFamily any -AddressFamily any - -# HostKey for protocol version 1 -#HostKey /etc/ssh/ssh_host_key -# HostKeys for protocol version 2 -#HostKey /etc/ssh/ssh_host_rsa_key -#HostKey /etc/ssh/ssh_host_dsa_key - -# Lifetime and size of ephemeral version 1 server key -#KeyRegenerationInterval 1h -#ServerKeyBits 1024 -# Logging -# obsoletes QuietMode and FascistLogging -#SyslogFacility AUTH -SyslogFacility AUTH -#LogLevel INFO -LogLevel INFO - -# Authentication: - -#LoginGraceTime 120 -LoginGraceTime 120 -#PermitRootLogin yes -PermitRootLogin yes -#StrictModes yes -#MaxAuthTries 6 - -#RSAAuthentication yes -#PubkeyAuthentication yes -PubkeyAuthentication yes -#AuthorizedKeysFile .ssh/authorized_keys - -# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts -#RhostsRSAAuthentication no -# similar for protocol version 2 -#HostbasedAuthentication no -HostbasedAuthentication no -# Change to yes if you don't trust ~/.ssh/known_hosts for -# RhostsRSAAuthentication and HostbasedAuthentication -#IgnoreUserKnownHosts no -IgnoreUserKnownHosts no -# Don't read the user's ~/.rhosts and ~/.shosts files -#IgnoreRhosts yes -IgnoreRhosts yes - -# To disable tunneled clear text passwords, change to no here! -#PasswordAuthentication yes -PasswordAuthentication yes -#PermitEmptyPasswords no - -# Change to no to disable s/key passwords -#ChallengeResponseAuthentication yes -ChallengeResponseAuthentication yes - -# Kerberos options -#KerberosOrLocalPasswd yes -#KerberosTicketCleanup yes -#KerberosGetAFSToken no - -# GSSAPI options -#GSSAPIAuthentication no -GSSAPIAuthentication yes -#GSSAPICleanupCredentials yes -GSSAPICleanupCredentials yes - -# Set this to 'yes' to enable PAM authentication, account processing, -# and session processing. If this is enabled, PAM authentication will -# be allowed through the ChallengeResponseAuthentication mechanism. -# Depending on your PAM configuration, this may bypass the setting of -# PasswordAuthentication, PermitEmptyPasswords, and -# "PermitRootLogin without-password". If you just want the PAM account and -# session checks to run without PAM authentication, then enable this but set -# ChallengeResponseAuthentication=no -#UsePAM no -UsePAM yes - -# Accept locale-related environment variables -AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES -AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT -AcceptEnv LC_IDENTIFICATION LC_ALL -#AllowTcpForwarding yes -AllowTcpForwarding yes -#GatewayPorts no -#X11Forwarding no -X11Forwarding yes -#X11DisplayOffset 10 -#X11UseLocalhost yes -X11UseLocalhost yes -#PrintMotd yes -PrintMotd yes -#PrintLastLog yes -#TCPKeepAlive yes -#UseLogin no -#UsePrivilegeSeparation yes -#PermitUserEnvironment no -#Compression delayed -#ClientAliveInterval 0 -ClientAliveInterval 0 -ClientAliveCountMax 3 -#ShowPatchLevel no -#UseDNS yes -UseDNS yes -#PidFile /var/run/sshd.pid -#MaxStartups 10:30:100 -#MaxSessions 10 - -#PermitTunnel no -#ChrootDirectory none - -# no default banner path -#Banner none -Banner none - -# override default of no subsystems -Subsystem sftp /usr/lib/openssh/sftp-server - diff --git a/spec/fixtures/testing/Debian-11_ssh_config b/spec/fixtures/testing/Debian-11_ssh_config deleted file mode 100644 index 8f163d74..00000000 --- a/spec/fixtures/testing/Debian-11_ssh_config +++ /dev/null @@ -1,11 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes - HashKnownHosts yes - Include /etc/ssh/ssh_config.d/*.conf - SendEnv LANG - SendEnv LC_* diff --git a/spec/fixtures/testing/Debian-11_sshd_config b/spec/fixtures/testing/Debian-11_sshd_config deleted file mode 100644 index 4b0dba9d..00000000 --- a/spec/fixtures/testing/Debian-11_sshd_config +++ /dev/null @@ -1,13 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -Include /etc/ssh/sshd_config.d/*.conf -AcceptEnv LANG -AcceptEnv LC_* -KbdInteractiveAuthentication no -PrintMotd no -Subsystem sftp /usr/lib/openssh/sftp-server -UsePAM yes -X11Forwarding yes diff --git a/spec/fixtures/testing/Debian-12_ssh_config b/spec/fixtures/testing/Debian-12_ssh_config deleted file mode 100644 index 8f163d74..00000000 --- a/spec/fixtures/testing/Debian-12_ssh_config +++ /dev/null @@ -1,11 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes - HashKnownHosts yes - Include /etc/ssh/ssh_config.d/*.conf - SendEnv LANG - SendEnv LC_* diff --git a/spec/fixtures/testing/Debian-12_sshd_config b/spec/fixtures/testing/Debian-12_sshd_config deleted file mode 100644 index 4b0dba9d..00000000 --- a/spec/fixtures/testing/Debian-12_sshd_config +++ /dev/null @@ -1,13 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -Include /etc/ssh/sshd_config.d/*.conf -AcceptEnv LANG -AcceptEnv LC_* -KbdInteractiveAuthentication no -PrintMotd no -Subsystem sftp /usr/lib/openssh/sftp-server -UsePAM yes -X11Forwarding yes diff --git a/spec/fixtures/testing/RedHat-7_ssh_config b/spec/fixtures/testing/RedHat-7_ssh_config deleted file mode 100644 index c59b073d..00000000 --- a/spec/fixtures/testing/RedHat-7_ssh_config +++ /dev/null @@ -1,24 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - ForwardX11Trusted yes - GSSAPIAuthentication yes - HashKnownHosts no - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/RedHat-7_sshd_config b/spec/fixtures/testing/RedHat-7_sshd_config deleted file mode 100644 index a18534e5..00000000 --- a/spec/fixtures/testing/RedHat-7_sshd_config +++ /dev/null @@ -1,46 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -AcceptEnv LANG -AcceptEnv LC_ADDRESS -AcceptEnv LC_ALL -AcceptEnv LC_COLLATE -AcceptEnv LC_CTYPE -AcceptEnv LC_IDENTIFICATION -AcceptEnv LC_MEASUREMENT -AcceptEnv LC_MESSAGES -AcceptEnv LC_MONETARY -AcceptEnv LC_NAME -AcceptEnv LC_NUMERIC -AcceptEnv LC_PAPER -AcceptEnv LC_TELEPHONE -AcceptEnv LC_TIME -AddressFamily any -AllowTcpForwarding yes -Banner none -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -GSSAPICleanupCredentials yes -HostbasedAuthentication no -HostKey /etc/ssh/ssh_host_rsa_key -IgnoreRhosts yes -IgnoreUserKnownHosts no -KbdInteractiveAuthentication yes -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -PermitTunnel no -Port 22 -PrintMotd yes -PubkeyAuthentication yes -Subsystem sftp /usr/libexec/openssh/sftp-server -SyslogFacility AUTH -TCPKeepAlive yes -UseDNS yes -UsePAM yes -X11Forwarding yes -X11UseLocalhost yes -XAuthLocation /usr/bin/xauth diff --git a/spec/fixtures/testing/SLED-10_ssh_config b/spec/fixtures/testing/SLED-10_ssh_config deleted file mode 100644 index aa59e51d..00000000 --- a/spec/fixtures/testing/SLED-10_ssh_config +++ /dev/null @@ -1,22 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/SLED-11_ssh_config b/spec/fixtures/testing/SLED-11_ssh_config deleted file mode 100644 index aa59e51d..00000000 --- a/spec/fixtures/testing/SLED-11_ssh_config +++ /dev/null @@ -1,22 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/SLED-11_sshd_config b/spec/fixtures/testing/SLED-11_sshd_config deleted file mode 100644 index e31a4335..00000000 --- a/spec/fixtures/testing/SLED-11_sshd_config +++ /dev/null @@ -1,46 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -AcceptEnv LANG -AcceptEnv LC_ADDRESS -AcceptEnv LC_ALL -AcceptEnv LC_COLLATE -AcceptEnv LC_CTYPE -AcceptEnv LC_IDENTIFICATION -AcceptEnv LC_MEASUREMENT -AcceptEnv LC_MESSAGES -AcceptEnv LC_MONETARY -AcceptEnv LC_NAME -AcceptEnv LC_NUMERIC -AcceptEnv LC_PAPER -AcceptEnv LC_TELEPHONE -AcceptEnv LC_TIME -AddressFamily any -AllowTcpForwarding yes -Banner none -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -GSSAPICleanupCredentials yes -HostbasedAuthentication no -HostKey /etc/ssh/ssh_host_rsa_key -IgnoreRhosts yes -IgnoreUserKnownHosts no -KbdInteractiveAuthentication yes -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -PermitTunnel no -Port 22 -PrintMotd yes -PubkeyAuthentication yes -Subsystem sftp /usr/lib64/ssh/sftp-server -SyslogFacility AUTH -TCPKeepAlive yes -UseDNS yes -UsePAM yes -X11Forwarding yes -X11UseLocalhost yes -XAuthLocation /usr/bin/xauth diff --git a/spec/fixtures/testing/SLED-12_ssh_config b/spec/fixtures/testing/SLED-12_ssh_config deleted file mode 100644 index aa59e51d..00000000 --- a/spec/fixtures/testing/SLED-12_ssh_config +++ /dev/null @@ -1,22 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/SLED-12_sshd_config b/spec/fixtures/testing/SLED-12_sshd_config deleted file mode 100644 index b262e870..00000000 --- a/spec/fixtures/testing/SLED-12_sshd_config +++ /dev/null @@ -1,46 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -AcceptEnv LANG -AcceptEnv LC_ADDRESS -AcceptEnv LC_ALL -AcceptEnv LC_COLLATE -AcceptEnv LC_CTYPE -AcceptEnv LC_IDENTIFICATION -AcceptEnv LC_MEASUREMENT -AcceptEnv LC_MESSAGES -AcceptEnv LC_MONETARY -AcceptEnv LC_NAME -AcceptEnv LC_NUMERIC -AcceptEnv LC_PAPER -AcceptEnv LC_TELEPHONE -AcceptEnv LC_TIME -AddressFamily any -AllowTcpForwarding yes -Banner none -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -GSSAPICleanupCredentials yes -HostbasedAuthentication no -HostKey /etc/ssh/ssh_host_rsa_key -IgnoreRhosts yes -IgnoreUserKnownHosts no -KbdInteractiveAuthentication yes -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -PermitTunnel no -Port 22 -PrintMotd yes -PubkeyAuthentication yes -Subsystem sftp /usr/lib/ssh/sftp-server -SyslogFacility AUTH -TCPKeepAlive yes -UseDNS yes -UsePAM yes -X11Forwarding yes -X11UseLocalhost yes -XAuthLocation /usr/bin/xauth diff --git a/spec/fixtures/testing/SLES-10_ssh_config b/spec/fixtures/testing/SLES-10_ssh_config deleted file mode 100644 index aa59e51d..00000000 --- a/spec/fixtures/testing/SLES-10_ssh_config +++ /dev/null @@ -1,22 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/SLES-11_ssh_config b/spec/fixtures/testing/SLES-11_ssh_config deleted file mode 100644 index c59b073d..00000000 --- a/spec/fixtures/testing/SLES-11_ssh_config +++ /dev/null @@ -1,24 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - ForwardX11Trusted yes - GSSAPIAuthentication yes - HashKnownHosts no - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/SLES-11_sshd_config b/spec/fixtures/testing/SLES-11_sshd_config deleted file mode 100644 index e31a4335..00000000 --- a/spec/fixtures/testing/SLES-11_sshd_config +++ /dev/null @@ -1,46 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -AcceptEnv LANG -AcceptEnv LC_ADDRESS -AcceptEnv LC_ALL -AcceptEnv LC_COLLATE -AcceptEnv LC_CTYPE -AcceptEnv LC_IDENTIFICATION -AcceptEnv LC_MEASUREMENT -AcceptEnv LC_MESSAGES -AcceptEnv LC_MONETARY -AcceptEnv LC_NAME -AcceptEnv LC_NUMERIC -AcceptEnv LC_PAPER -AcceptEnv LC_TELEPHONE -AcceptEnv LC_TIME -AddressFamily any -AllowTcpForwarding yes -Banner none -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -GSSAPICleanupCredentials yes -HostbasedAuthentication no -HostKey /etc/ssh/ssh_host_rsa_key -IgnoreRhosts yes -IgnoreUserKnownHosts no -KbdInteractiveAuthentication yes -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -PermitTunnel no -Port 22 -PrintMotd yes -PubkeyAuthentication yes -Subsystem sftp /usr/lib64/ssh/sftp-server -SyslogFacility AUTH -TCPKeepAlive yes -UseDNS yes -UsePAM yes -X11Forwarding yes -X11UseLocalhost yes -XAuthLocation /usr/bin/xauth diff --git a/spec/fixtures/testing/SLES-12_ssh_config b/spec/fixtures/testing/SLES-12_ssh_config deleted file mode 100644 index c59b073d..00000000 --- a/spec/fixtures/testing/SLES-12_ssh_config +++ /dev/null @@ -1,24 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - ForwardX11Trusted yes - GSSAPIAuthentication yes - HashKnownHosts no - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/SLES-12_sshd_config b/spec/fixtures/testing/SLES-12_sshd_config deleted file mode 100644 index b262e870..00000000 --- a/spec/fixtures/testing/SLES-12_sshd_config +++ /dev/null @@ -1,46 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -AcceptEnv LANG -AcceptEnv LC_ADDRESS -AcceptEnv LC_ALL -AcceptEnv LC_COLLATE -AcceptEnv LC_CTYPE -AcceptEnv LC_IDENTIFICATION -AcceptEnv LC_MEASUREMENT -AcceptEnv LC_MESSAGES -AcceptEnv LC_MONETARY -AcceptEnv LC_NAME -AcceptEnv LC_NUMERIC -AcceptEnv LC_PAPER -AcceptEnv LC_TELEPHONE -AcceptEnv LC_TIME -AddressFamily any -AllowTcpForwarding yes -Banner none -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -GSSAPICleanupCredentials yes -HostbasedAuthentication no -HostKey /etc/ssh/ssh_host_rsa_key -IgnoreRhosts yes -IgnoreUserKnownHosts no -KbdInteractiveAuthentication yes -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -PermitTunnel no -Port 22 -PrintMotd yes -PubkeyAuthentication yes -Subsystem sftp /usr/lib/ssh/sftp-server -SyslogFacility AUTH -TCPKeepAlive yes -UseDNS yes -UsePAM yes -X11Forwarding yes -X11UseLocalhost yes -XAuthLocation /usr/bin/xauth diff --git a/spec/fixtures/testing/Solaris-10_ssh_config b/spec/fixtures/testing/Solaris-10_ssh_config deleted file mode 100644 index 3b38f9bd..00000000 --- a/spec/fixtures/testing/Solaris-10_ssh_config +++ /dev/null @@ -1,7 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes diff --git a/spec/fixtures/testing/Solaris-10_sshd_config b/spec/fixtures/testing/Solaris-10_sshd_config deleted file mode 100644 index 89ac542a..00000000 --- a/spec/fixtures/testing/Solaris-10_sshd_config +++ /dev/null @@ -1,29 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -AllowTcpForwarding yes -Banner none -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -HostbasedAuthentication no -HostKey /etc/ssh/ssh_host_rsa_key -IgnoreRhosts yes -IgnoreUserKnownHosts no -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -Port 22 -PrintMotd yes -PubkeyAuthentication yes -Subsystem sftp /usr/lib/ssh/sftp-server -SyslogFacility AUTH -X11Forwarding yes -X11UseLocalhost yes -XAuthLocation /usr/openwin/bin/xauth -ChallengeResponseAuthentication yes -GSSAPIKeyExchange yes -PAMAuthenticationViaKBDInt yes -ServerKeyBits 768 diff --git a/spec/fixtures/testing/Solaris-11_ssh_config b/spec/fixtures/testing/Solaris-11_ssh_config deleted file mode 100644 index 3b38f9bd..00000000 --- a/spec/fixtures/testing/Solaris-11_ssh_config +++ /dev/null @@ -1,7 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes diff --git a/spec/fixtures/testing/Solaris-11_sshd_config b/spec/fixtures/testing/Solaris-11_sshd_config deleted file mode 100644 index 1dde6fef..00000000 --- a/spec/fixtures/testing/Solaris-11_sshd_config +++ /dev/null @@ -1,29 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -AllowTcpForwarding yes -Banner none -ChallengeResponseAuthentication yes -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -HostbasedAuthentication no -HostKey /etc/ssh/ssh_host_rsa_key -IgnoreRhosts yes -IgnoreUserKnownHosts no -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -Port 22 -PrintMotd yes -PubkeyAuthentication yes -Subsystem sftp /usr/lib/ssh/sftp-server -SyslogFacility AUTH -X11Forwarding yes -X11UseLocalhost yes -XAuthLocation /usr/openwin/bin/xauth -GSSAPIKeyExchange yes -PAMAuthenticationViaKBDInt yes -ServerKeyBits 768 diff --git a/spec/fixtures/testing/Solaris-9_ssh_config b/spec/fixtures/testing/Solaris-9_ssh_config deleted file mode 100644 index 3b38f9bd..00000000 --- a/spec/fixtures/testing/Solaris-9_ssh_config +++ /dev/null @@ -1,7 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - GSSAPIAuthentication yes diff --git a/spec/fixtures/testing/Solaris-9_sshd_config b/spec/fixtures/testing/Solaris-9_sshd_config deleted file mode 100644 index 6aee5aad..00000000 --- a/spec/fixtures/testing/Solaris-9_sshd_config +++ /dev/null @@ -1,12 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -HostKey /etc/ssh/ssh_host_rsa_key -Subsystem sftp /usr/lib/ssh/sftp-server -XAuthLocation /usr/openwin/bin/xauth -ChallengeResponseAuthentication yes -GSSAPIKeyExchange yes -PAMAuthenticationViaKBDInt yes -ServerKeyBits 768 diff --git a/spec/fixtures/testing/Ubuntu-20.04_ssh_config b/spec/fixtures/testing/Ubuntu-20.04_ssh_config deleted file mode 100644 index b3f6c40f..00000000 --- a/spec/fixtures/testing/Ubuntu-20.04_ssh_config +++ /dev/null @@ -1,25 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/ssh_config for more info - -Host * - ForwardX11Trusted yes - GSSAPIAuthentication yes - HashKnownHosts yes - Include /etc/ssh/ssh_config.d/*.conf - SendEnv LANG - SendEnv LANGUAGE - SendEnv LC_ADDRESS - SendEnv LC_ALL - SendEnv LC_COLLATE - SendEnv LC_CTYPE - SendEnv LC_IDENTIFICATION - SendEnv LC_MEASUREMENT - SendEnv LC_MESSAGES - SendEnv LC_MONETARY - SendEnv LC_NAME - SendEnv LC_NUMERIC - SendEnv LC_PAPER - SendEnv LC_TELEPHONE - SendEnv LC_TIME diff --git a/spec/fixtures/testing/Ubuntu-20.04_sshd_config b/spec/fixtures/testing/Ubuntu-20.04_sshd_config deleted file mode 100644 index b96b1a14..00000000 --- a/spec/fixtures/testing/Ubuntu-20.04_sshd_config +++ /dev/null @@ -1,43 +0,0 @@ -# This file is being maintained by Puppet. -# DO NOT EDIT -# -# See https://man.openbsd.org/sshd_config for more info - -Include /etc/ssh/sshd_config.d/*.conf -AcceptEnv LANG -AcceptEnv LC_ADDRESS -AcceptEnv LC_ALL -AcceptEnv LC_COLLATE -AcceptEnv LC_CTYPE -AcceptEnv LC_IDENTIFICATION -AcceptEnv LC_MEASUREMENT -AcceptEnv LC_MESSAGES -AcceptEnv LC_MONETARY -AcceptEnv LC_NAME -AcceptEnv LC_NUMERIC -AcceptEnv LC_PAPER -AcceptEnv LC_TELEPHONE -AcceptEnv LC_TIME -AddressFamily any -AllowTcpForwarding yes -Banner none -ClientAliveCountMax 3 -ClientAliveInterval 0 -GSSAPIAuthentication yes -GSSAPICleanupCredentials yes -HostbasedAuthentication no -IgnoreRhosts yes -IgnoreUserKnownHosts no -KbdInteractiveAuthentication yes -LoginGraceTime 120 -PasswordAuthentication yes -PermitRootLogin yes -Port 22 -PrintMotd no -PubkeyAuthentication yes -Subsystem sftp /usr/lib/openssh/sftp-server -SyslogFacility AUTH -UseDNS yes -UsePAM yes -X11Forwarding yes -X11UseLocalhost yes diff --git a/spec/fixtures/untouched/Debian-11_ssh_config b/spec/fixtures/untouched/Debian-11_ssh_config deleted file mode 100644 index 2ea558c9..00000000 --- a/spec/fixtures/untouched/Debian-11_ssh_config +++ /dev/null @@ -1,52 +0,0 @@ -# This is the ssh client system-wide configuration file. See -# ssh_config(5) for more information. This file provides defaults for -# users, and the values can be changed in per-user configuration files -# or on the command line. - -# Configuration data is parsed as follows: -# 1. command line options -# 2. user-specific file -# 3. system-wide file -# Any configuration value is only changed the first time it is set. -# Thus, host-specific definitions should be at the beginning of the -# configuration file, and defaults at the end. - -# Site-wide defaults for some commonly used options. For a comprehensive -# list of available options, their meanings and defaults, please see the -# ssh_config(5) man page. - -Include /etc/ssh/ssh_config.d/*.conf - -Host * -# ForwardAgent no -# ForwardX11 no -# ForwardX11Trusted yes -# PasswordAuthentication yes -# HostbasedAuthentication no -# GSSAPIAuthentication no -# GSSAPIDelegateCredentials no -# GSSAPIKeyExchange no -# GSSAPITrustDNS no -# BatchMode no -# CheckHostIP yes -# AddressFamily any -# ConnectTimeout 0 -# StrictHostKeyChecking ask -# IdentityFile ~/.ssh/id_rsa -# IdentityFile ~/.ssh/id_dsa -# IdentityFile ~/.ssh/id_ecdsa -# IdentityFile ~/.ssh/id_ed25519 -# Port 22 -# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc -# MACs hmac-md5,hmac-sha1,umac-64@openssh.com -# EscapeChar ~ -# Tunnel no -# TunnelDevice any:any -# PermitLocalCommand no -# VisualHostKey no -# ProxyCommand ssh -q -W %h:%p gateway.example.com -# RekeyLimit 1G 1h -# UserKnownHostsFile ~/.ssh/known_hosts.d/%k - SendEnv LANG LC_* - HashKnownHosts yes - GSSAPIAuthentication yes diff --git a/spec/fixtures/untouched/Debian-11_sshd_config b/spec/fixtures/untouched/Debian-11_sshd_config deleted file mode 100644 index c1aa8b0a..00000000 --- a/spec/fixtures/untouched/Debian-11_sshd_config +++ /dev/null @@ -1,123 +0,0 @@ -# $OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj Exp $ - -# This is the sshd server system-wide configuration file. See -# sshd_config(5) for more information. - -# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin - -# The strategy used for options in the default sshd_config shipped with -# OpenSSH is to specify options with their default value where -# possible, but leave them commented. Uncommented options override the -# default value. - -Include /etc/ssh/sshd_config.d/*.conf - -#Port 22 -#AddressFamily any -#ListenAddress 0.0.0.0 -#ListenAddress :: - -#HostKey /etc/ssh/ssh_host_rsa_key -#HostKey /etc/ssh/ssh_host_ecdsa_key -#HostKey /etc/ssh/ssh_host_ed25519_key - -# Ciphers and keying -#RekeyLimit default none - -# Logging -#SyslogFacility AUTH -#LogLevel INFO - -# Authentication: - -#LoginGraceTime 2m -#PermitRootLogin prohibit-password -#StrictModes yes -#MaxAuthTries 6 -#MaxSessions 10 - -#PubkeyAuthentication yes - -# Expect .ssh/authorized_keys2 to be disregarded by default in future. -#AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2 - -#AuthorizedPrincipalsFile none - -#AuthorizedKeysCommand none -#AuthorizedKeysCommandUser nobody - -# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts -#HostbasedAuthentication no -# Change to yes if you don't trust ~/.ssh/known_hosts for -# HostbasedAuthentication -#IgnoreUserKnownHosts no -# Don't read the user's ~/.rhosts and ~/.shosts files -#IgnoreRhosts yes - -# To disable tunneled clear text passwords, change to no here! -#PasswordAuthentication yes -#PermitEmptyPasswords no - -# Change to yes to enable challenge-response passwords (beware issues with -# some PAM modules and threads) -ChallengeResponseAuthentication no - -# Kerberos options -#KerberosAuthentication no -#KerberosOrLocalPasswd yes -#KerberosTicketCleanup yes -#KerberosGetAFSToken no - -# GSSAPI options -#GSSAPIAuthentication no -#GSSAPICleanupCredentials yes -#GSSAPIStrictAcceptorCheck yes -#GSSAPIKeyExchange no - -# Set this to 'yes' to enable PAM authentication, account processing, -# and session processing. If this is enabled, PAM authentication will -# be allowed through the ChallengeResponseAuthentication and -# PasswordAuthentication. Depending on your PAM configuration, -# PAM authentication via ChallengeResponseAuthentication may bypass -# the setting of "PermitRootLogin without-password". -# If you just want the PAM account and session checks to run without -# PAM authentication, then enable this but set PasswordAuthentication -# and ChallengeResponseAuthentication to 'no'. -UsePAM yes - -#AllowAgentForwarding yes -#AllowTcpForwarding yes -#GatewayPorts no -X11Forwarding yes -#X11DisplayOffset 10 -#X11UseLocalhost yes -#PermitTTY yes -PrintMotd no -#PrintLastLog yes -#TCPKeepAlive yes -#PermitUserEnvironment no -#Compression delayed -#ClientAliveInterval 0 -#ClientAliveCountMax 3 -#UseDNS no -#PidFile /var/run/sshd.pid -#MaxStartups 10:30:100 -#PermitTunnel no -#ChrootDirectory none -#VersionAddendum none - -# no default banner path -#Banner none - -# Allow client to pass locale environment variables -AcceptEnv LANG LC_* - -# override default of no subsystems -Subsystem sftp /usr/lib/openssh/sftp-server - -# Example of overriding settings on a per-user basis -#Match User anoncvs -# X11Forwarding no -# AllowTcpForwarding no -# PermitTTY no -# ForceCommand cvs server diff --git a/spec/hiera.yaml b/spec/hiera.yaml deleted file mode 100644 index a13bb7dd..00000000 --- a/spec/hiera.yaml +++ /dev/null @@ -1,8 +0,0 @@ ---- -:backends: - - yaml -:yaml: - :datadir: 'spec/fixtures/hiera/hieradata' -:hierarchy: - - fqdn/%{fqdn} - - specific/%{specific} diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb index 860173c7..dd1e6999 100644 --- a/spec/spec_helper.rb +++ b/spec/spec_helper.rb @@ -38,7 +38,6 @@ RSpec.configure do |c| c.default_facts = default_facts - c.hiera_config = 'spec/hiera.yaml' c.before :each do # set to strictest setting for testing # by default Puppet runs at warning level