#2815 closed change (fixed)

Allow for SSH agent forwarding to be enabled via Hiera

Reported by:	matze	Assignee:	matze
Priority:	P3	Milestone:
Module:	Infrastructure	Keywords:
Cc:	fred	Blocked By:
Blocking:		Platform:	Unknown / Cross platform
Ready:	yes	Confidential:	no
Tester:	Unknown	Verified working:	no
Review URL(s):	https://codereview.adblockplus.org/29323173/

As discussed internally, we want to integrate an option that allows for enabling SSH agent forwarding when and where required.

Move modules/ssh/files/sshd_config to modules/ssh/templates/sshd_config.erb
Adjust Concat::Fragment['sshd_config_template'] in ../manifests/init.pp accordingly
Extend class Class['ssh'] to recognize parameter $agent_forwarding, defaulting to false (Puppet) resp. no (SSHd)
Integrate parameter $agent_forwarding with sshd_config.erb
Ensure one can adjust the parameter via modules/private/hiera/base.yaml

Summary:

Description:

You may use WikiFormatting here.

Type:

Priority:

Milestone:

Module:

Keywords:

Cc:

Blocked By:

Blocking:

Platform:

Ready:

Confidential:

Tester:

Verified working:

Review URL(s):

Summary:
Description:	You may use WikiFormatting here. As discussed internally, we want to integrate an option that allows for enabling [http://www.unixwiz.net/techtips/ssh-agent-forwarding.html SSH agent forwarding] when and where required. === What to change === - Move `modules/ssh/files/sshd_config` to `modules/ssh/templates/sshd_config.erb` - Adjust `Concat::Fragment['sshd_config_template']` in `../manifests/init.pp` accordingly - Extend class `Class['ssh']` to recognize parameter `$agent_forwarding`, defaulting to `false` (Puppet) resp. `no` (SSHd) - Integrate parameter `$agent_forwarding` with `sshd_config.erb` - Ensure one can adjust the parameter via `modules/private/hiera/base.yaml`
Type:		Priority:
Milestone:		Module:
Keywords:		Cc:
Blocked By:		Blocking:
Platform:		Ready:
Confidential:		Tester:
Verified working:
Review URL(s):	https://codereview.adblockplus.org/29323173/