Re: [Puppet Users] saz-ssh, hiera and options

[Martin Alfke]

The main ssh class has the parameter server_options:
# @param options
# Dynamic hash for openssh server option

ssh::server_options:
  AuthorizedKeysCommand: ‘/path/to/command’

If you are using ssh::server class, the parameter ssh::server::options must be 
used.


> On 2. May 2023, at 17:29, Laci D  wrote:
> 
> Thank you Martin, adding the following example to my nodes/myserversfqdn.yaml 
> did it for me.
> 
> ssh::server::match_block:
>   '*,!that_other_group':
> type: group
> options:
>   ForceCommand: '/usr/bin/kpasswd'
> 
> I have another question, how can I specify different values in Hiera for 
> different operating systems?
> 
> For example AuthorizedKeysCommand needs a different value in Linux and 
> FreeBSD?
>   
> On Tuesday, May 2, 2023 at 3:51:20 AM UTC-4 Martin Alfke wrote:
>> Hi,
>> 
>> Ssh::server class has a parameter called “match_block” which calls a defined 
>> type:
>> https://github.com/saz/puppet-ssh/blob/master/manifests/server/match_block.pp
>> 
>> The defined type uses a template:
>> https://github.com/saz/puppet-ssh/blob/master/templates/sshd_match_block.erb
>> 
>> A hiera example is in the docs:
>> https://forge.puppet.com/modules/saz/ssh/readme#hiera-example
>> 
>> Hth,
>> Martin
>> 
>> 
>> 
>>> On 1. May 2023, at 23:08, Laci D > wrote:
>>> 
>> 
>>> Hi,
>>> 
>>> I'm using saz-ssh to configure sshd_config, options are stored in Hiera. I 
>>> didn't find the way how to implement "Match user/group", for example:
>>> 
>>> Match group *, !not_that_group
>>> 'ForceCommand' => 'internal-sftp',
>>> 
>>> I did see the example  but 
>>> when I add that to my manifests/profiles/ssh.pp then Puppet is complaining 
>>> and I'm not seeing how to configure it using Hiera.
>>> 
>>> Any ideas?
>>>  
>>> 
>> 
>>> -- 
>>> You received this message because you are subscribed to the Google Groups 
>>> "Puppet Users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an 
>>> email to puppet-users...@googlegroups.com <>.
>>> To view this discussion on the web visit 
>>> https://groups.google.com/d/msgid/puppet-users/0f953ebb-ee44-481b-81da-639ade904c8bn%40googlegroups.com
>>>  
>>> .
>> 
> 
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to puppet-users+unsubscr...@googlegroups.com 
> .
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/puppet-users/7ea988f3-c68d-45f7-a7f8-cf37929a09fcn%40googlegroups.com
>  
> .

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/C14BD0DC-FB34-4E85-8C0B-A7112DF4ABBF%40gmail.com.

[Puppet Users] Re: May the Source Be With You!

[Edwin Maldonado]

Hey Puppet community,  

We are excited about the upcoming May the Source Be With You virtual 
hackathon happening this Thursday 

 
Remember to register your participation by clicking on this link:  

SIGN UP HERE 


The event will take place on May 4th, 2023, with timings as follows: 


   - PDT: 10 am - 6 pm 
   - CEST: 10 am - 6 pm 

We look forward to seeing you there!  JOIN US  


On Monday, April 24, 2023 at 6:23:26 PM UTC+2 Edwin Maldonado wrote:

> 拾️ You’re invited to our first-annual May the Source Be With You Virtual 
> Hackathon 
> Let’s blow up pain points, together.
>
> [image: pup-blog-may-the-source-be-with-you-2.jpg] 
>
> *LEARN MORE*  With 
> Star Wars Day coming up on May 4, we’d like to invite you to our first 
> annual “May the Source Be With You” virtual hackathon focused on 
> improvements to our developer tooling ecosystem.
>
>
> Do you have a pet peeve about the PDK, rspec-puppet, puppet-lint, the 
> Puppet VSCode extension, or any other tool you use when building Puppet 
> code? Join forces with us to help defeat these pain points during our 
> live event. 
>
>
> You won’t want to miss it! 
>
>
> *JOIN US* 
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/1eb2e300-61a8-4a9e-a746-176485fee622n%40googlegroups.com.

[Puppet Users] FAIL in (autosign-csr?-ruby-exe-test) (certificate_authority_test.clj:389)

[Nayana Thorat]

Building puppet server from source on Ubuntu 20.04 on x86
Failing below test failures when executed 'lein test' 
FAIL in (autosign-csr?-ruby-exe-test) (certificate_authority_test.clj:369)
FAIL in (autosign-csr?-ruby-exe-test) (certificate_authority_test.clj:379)
FAIL in (autosign-csr?-ruby-exe-test) (certificate_authority_test.clj:385)
FAIL in (autosign-csr?-ruby-exe-test) (certificate_authority_test.clj:389)
FAIL in (handle-put-certificate-request!-test) 
(certificate_authority_core_test.clj:346)

$ openssl version
OpenSSL 1.1.1f  31 Mar 2020
$ java --version
openjdk 17.0.6 2023-01-17


-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/d6c7fcb8-bf97-4d35-8ccd-c6cceca9a08en%40googlegroups.com.

Re: [Puppet Users] saz-ssh, hiera and options

[Laci D]

Thank you Martin, adding the following example to my 
*nodes/myserversfqdn.yaml* did it for me.

ssh::server::match_block:
  '*,!that_other_group':
type: group
options:
  ForceCommand: '/usr/bin/kpasswd'

I have another question, how can I specify different values in Hiera for 
different operating systems?

For example *AuthorizedKeysCommand* needs a different value in Linux and 
FreeBSD?
  
On Tuesday, May 2, 2023 at 3:51:20 AM UTC-4 Martin Alfke wrote:

> Hi,
>
> Ssh::server class has a parameter called “match_block” which calls a 
> defined type:
>
> https://github.com/saz/puppet-ssh/blob/master/manifests/server/match_block.pp
>
> The defined type uses a template:
>
> https://github.com/saz/puppet-ssh/blob/master/templates/sshd_match_block.erb
>
> A hiera example is in the docs:
> https://forge.puppet.com/modules/saz/ssh/readme#hiera-example
>
> Hth,
> Martin
>
>
> On 1. May 2023, at 23:08, Laci D  wrote:
>
> Hi,
>
> I'm using *saz-ssh* to configure sshd_config, options are stored in 
> Hiera. I didn't find the way how to implement "Match user/group", for 
> example:
>
> Match group *, !not_that_group
> 'ForceCommand' => 'internal-sftp',
>
> I did see the example  but 
> when I add that to my manifests/profiles/ssh.pp then Puppet is 
> complaining and I'm not seeing how to configure it using Hiera.
>
> Any ideas?
>  
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to puppet-users...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/puppet-users/0f953ebb-ee44-481b-81da-639ade904c8bn%40googlegroups.com
>  
> 
> .
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/7ea988f3-c68d-45f7-a7f8-cf37929a09fcn%40googlegroups.com.

Re: [Puppet Users] saz-ssh, hiera and options

[Martin Alfke]

Hi,

Ssh::server class has a parameter called “match_block” which calls a defined 
type:
https://github.com/saz/puppet-ssh/blob/master/manifests/server/match_block.pp

The defined type uses a template:
https://github.com/saz/puppet-ssh/blob/master/templates/sshd_match_block.erb

A hiera example is in the docs:
https://forge.puppet.com/modules/saz/ssh/readme#hiera-example

Hth,
Martin


> On 1. May 2023, at 23:08, Laci D  wrote:
> 
> Hi,
> 
> I'm using saz-ssh to configure sshd_config, options are stored in Hiera. I 
> didn't find the way how to implement "Match user/group", for example:
> 
> Match group *, !not_that_group
> 'ForceCommand' => 'internal-sftp',
> 
> I did see the example  but 
> when I add that to my manifests/profiles/ssh.pp then Puppet is complaining 
> and I'm not seeing how to configure it using Hiera.
> 
> Any ideas?
>  
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to puppet-users+unsubscr...@googlegroups.com 
> .
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/puppet-users/0f953ebb-ee44-481b-81da-639ade904c8bn%40googlegroups.com
>  
> .

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/151DDB9C-20DA-4DCC-8F6B-43EFFF684064%40gmail.com.