Skip to content

Opscode OpenSSH Chef Cookbook fork which adds sshd_config tuning parameters and suse platform support

Notifications You must be signed in to change notification settings

customink-webops/chef-openssh

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

38 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Description

Installs and configures sshd.

Attributes

  • node['openssh'][port] - array of ports that sshd listens on, default [ "22" ]
  • node['openssh']['listen_address'] - array of IPs that sshd listens on, default [ "0.0.0.0" ]
  • node['openssh']['permit_root_login'] - can root ssh in, default "yes"
  • node['openssh']['x11_forwarding] - allow x11 forwarding, default "no"
  • node['openssh']['password_authentication'] - can users login with passwords instead of keys, default "yes"

MaxStartups specifies the maximum number of concurrent unauthenticated connections to the sshd daemon. Random early drop can be enabled by specifying three values:

  • node['openssh']['maxstartups']['start'] - if there are currently "start" unauthenticated connections (default 10)
  • node['openssh']['maxstartups']['rate'] - sshd will refuse connection attempts with a probability of "rate/100" (default 30)
  • node['openssh']['maxstartups']['full'] - all connection attempts are refused if the number of unauthenticated connections reaches "full" (default 60)

About

Opscode OpenSSH Chef Cookbook fork which adds sshd_config tuning parameters and suse platform support

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Ruby 100.0%