aboutsummaryrefslogtreecommitdiffstats
path: root/modules/openssh
diff options
context:
space:
mode:
authorPascal Terjan <pterjan@gmail.com>2016-02-07 18:57:08 +0000
committerPascal Terjan <pterjan@gmail.com>2016-02-07 18:58:45 +0000
commit0c0ff102b3be6cdc413120639221cdcda32e91ed (patch)
tree0a731660938208233a48ed65789ba573fe87da00 /modules/openssh
parentb7a4146c22073ad8e8ee97267b8fe465cbef9dcf (diff)
downloadpuppet-0c0ff102b3be6cdc413120639221cdcda32e91ed.tar
puppet-0c0ff102b3be6cdc413120639221cdcda32e91ed.tar.gz
puppet-0c0ff102b3be6cdc413120639221cdcda32e91ed.tar.bz2
puppet-0c0ff102b3be6cdc413120639221cdcda32e91ed.tar.xz
puppet-0c0ff102b3be6cdc413120639221cdcda32e91ed.zip
Force sv_membersh.pl in ssh on duvel
That way we don't need to have it as default shell for everyone on the machine It should probably not hardcode duvel though
Diffstat (limited to 'modules/openssh')
-rw-r--r--modules/openssh/templates/sshd_config4
1 files changed, 4 insertions, 0 deletions
diff --git a/modules/openssh/templates/sshd_config b/modules/openssh/templates/sshd_config
index 27eee0f1..7c6146fd 100644
--- a/modules/openssh/templates/sshd_config
+++ b/modules/openssh/templates/sshd_config
@@ -121,3 +121,7 @@ Subsystem sftp <%= path_to_sftp %>/sftp-server
# X11Forwarding no
# AllowTcpForwarding no
# ForceCommand cvs server
+<% if @hostname == 'duvel' then %>
+Match User !schedbot User !root
+ ForceCommand /usr/local/bin/sv_membersh.pl -c "$SSH_ORIGINAL_COMMAND"
+<% end %>