Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Michael Gliwinski
of one hardcoded > class per user. > > Thanks a lot for the tip! > > Cheers, > Marcello > > > -Original Message- > > From: puppet-users@googlegroups.com [mailto:puppet- > > us...@googlegroups.com] On Behalf Of dan trainor > > Sent: donderdag 25

RE: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Marcello de Sousa
Sent: vrijdag 26 februari 2010 11:32 > To: puppet-users@googlegroups.com > Cc: Alan Barrett > Subject: Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a > scoping question > > On Friday 26 Feb 2010 09:37:28 Alan Barrett wrote: > > On Thu, 25 Feb 2010, Marcello

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Michael Gliwinski
On Friday 26 Feb 2010 09:37:28 Alan Barrett wrote: > On Thu, 25 Feb 2010, Marcello de Sousa wrote: > > "IF homedir exists => deploy .ssh/authorized_keys , else do nothing" > > If you don't mind errors when you attempt to apply the manifest and the > homedir does not exist, then you could make the

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-26 Thread Alan Barrett
On Thu, 25 Feb 2010, Marcello de Sousa wrote: > "IF homedir exists => deploy .ssh/authorized_keys , else do nothing" If you don't mind errors when you attempt to apply the manifest and the homedir does not exist, then you could make the authorized_keys file depend on something that fails if the ho

RE: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Marcello de Sousa
r. Thanks a lot for the tip! Cheers, Marcello > -Original Message- > From: puppet-users@googlegroups.com [mailto:puppet- > us...@googlegroups.com] On Behalf Of dan trainor > Sent: donderdag 25 februari 2010 23:16 > To: puppet-users@googlegroups.com > Subject: Re: [Puppe

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread dan trainor
On Thu, Feb 25, 2010 at 12:52 PM, Patrick wrote: > > On Feb 25, 2010, at 11:23 AM, Marcello de Sousa wrote: > > > Patrick, > > > > If you do that you would put all the public keys together, wouldn't you ? > > That means users would be able to login as any other user. That is of > course > > not w

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Patrick
On Feb 25, 2010, at 11:23 AM, Marcello de Sousa wrote: > Patrick, > > If you do that you would put all the public keys together, wouldn't you ? > That means users would be able to login as any other user. That is of course > not what you want. > > We need to deploy a single specific public key

RE: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Marcello de Sousa
rom: puppet-users@googlegroups.com [mailto:puppet- > us...@googlegroups.com] On Behalf Of Patrick > Sent: donderdag 25 februari 2010 19:47 > To: puppet-users@googlegroups.com > Subject: Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a > scoping question > > What

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Patrick
What about deploying the keys to /etc/skel? Would that be enough for what you want? On Feb 25, 2010, at 8:47 AM, Marcello de Sousa wrote: > Hi Andrew, > >>> "IF homedir exists => deploy .ssh/authorized_keys , else do nothing" >>> As far as I know this is not possible with puppet. >> >> Marce

RE: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Marcello de Sousa
Hi Andrew, > > "IF homedir exists => deploy .ssh/authorized_keys , else do nothing" > > As far as I know this is not possible with puppet. > > Marcello, I want to understand your use case. AD and LDAP seem to be > fairly common in Puppet installations, and I'd like for ssh::auth to > work well w

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Michael Gliwinski
On Thursday 25 Feb 2010 15:39:09 Andrew Schulman wrote: > > I also manage users using AD (and likewise-open deployed with puppet), > > and I've had a similar issue. > > I couldn't find an elegant way to deploy ssh public keys "only if" the > > home dir exists. > > > > I do NOT want the user homedir

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Andrew Schulman
> I also manage users using AD (and likewise-open deployed with puppet), and > I've had a similar issue. > I couldn't find an elegant way to deploy ssh public keys "only if" the home > dir exists. > > I do NOT want the user homedir to be created by puppet! (It must be created > by likewise-open i

RE: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Marcello de Sousa
: puppet-users@googlegroups.com > Cc: Andrew Schulman > Subject: Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a > scoping question > > On Wednesday 24 Feb 2010 18:12:18 Andrew Schulman wrote: > > > Hi Andrew, > > > > > > Just noticed that ssh:

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-25 Thread Michael Gliwinski
On Wednesday 24 Feb 2010 18:12:18 Andrew Schulman wrote: > > Hi Andrew, > > > > Just noticed that ssh::auth::server doesn't require the resource for > > ~/.ssh directory. Considering the documentation says it does (in > > Examples -> 1. With account management at the bottom mentions that > > 'requ

Re: [Puppet Users] ssh::auth server dependency on ~/.ssh and a scoping question

2010-02-24 Thread Andrew Schulman
> Hi Andrew, > > Just noticed that ssh::auth::server doesn't require the resource for ~/.ssh > directory. Considering the documentation says it does (in Examples -> 1. > With > account management at the bottom mentions that 'require => [User[$title], > File["$home/.ssh"]]' is implicitly inclu