I've uploaded version 0.1 of ssh::auth to http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleSSHAuth .
ssh::auth is a Puppet module that provides centralized creation, distribution, and revocation of ssh keys for users. Features: * Each user may have one or more ssh key pairs, centrally created on the keymaster and distributed to servers and clients. * Each key pair may be installed onto any set of clients, and enabled for authentication as any user(s) on any set of servers. * Keys may have login options set as in authorized_keys(5), e.g. to force certain commands to run or limit port forwarding. * Keys can be uninstalled or revoked, either manually or automatically at given intervals, and new ones automatically created and distributed. Installation is easy, as it's just one file. ssh::auth aims to provide a complete solution for managing ssh keys for users, with a well-defined and -documented interface. There's a comparison to the other ssh-related tools available in Puppet at http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleSSHAuth#comparisons . Version 0.1 is an unstable release. It's fully functional in my testing, and meets the documentation as far as I know, but will certainly benefit from some testing and feedback. I call it unstable because once people have had a change to try it out, I'll consider changing the interface from its current definition-oriented version to a more virtual resource-oriented one. Andrew. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
