I've uploaded version 0.3 of ssh::auth to
http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleSSHAuth .  Changes in
this release:

* Regenerate key if $keytype or $length changes
* Update authorized_keys if $options changes
* Use ssh_authorized_keys to manage authorized_keys
* Remove comment parameter. The public key comment field is now used to identify
the key, via ssh_authorized_keys

ssh::auth is a Puppet module that provides centralized creation,
distribution, and revocation of ssh keys for users.  Features:

* Each user may have one or more ssh key pairs, centrally created on the
keymaster and distributed to servers and clients.

* Each key pair may be installed onto any set of clients, and enabled for
authentication as any user(s) on any set of servers.

* Keys may have login options set as in authorized_keys(5), e.g. to force
certain commands to run or limit port forwarding.

* Keys can be uninstalled or revoked, either manually or automatically at
given intervals, and new ones automatically created and distributed.

Installation is easy, as it's just one file.

ssh::auth aims to provide a complete solution for managing ssh keys for
users, with a well-defined and -documented interface.  There's a comparison
to the other ssh-related tools available in Puppet at
http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleSSHAuth#comparisons
.

Andrew.

--

You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.


Reply via email to