zzamboni / edit_sshd.cf

Created November 25, 2010


    
    View edit_sshd.cf 
  
  
      edit_sshd.cf
    
    
        Raw
      
    
    File suppressed. Click to show.
  
  
            1
            2
            3
            4
            5
            6
            7
            8
            9
            10
            11
            12
            13
            14
            15
            16
            17
            18
            19
            20
            21
            22
            23
            24
            25
            26
            27
            28
            29
            30
            31
            32
            33
            34
            35
            36
            37
            38
            39
            40
            41
            42
            43
            44
            45
            46
            47
            48
            49
            50
            51
            52
            53
            54
            55
            56
            57
          
          
            # Parameters are:
#    file: file to edit
#    params: an array indexed by parameter name, containing the corresponding values. For example:
#      "sshd[Protocol]"                                string => "2";
#      "sshd[X11Forwarding]"                           string => "yes";
#      "sshd[UseDNS]"                                  string => "no";
# Diego Zamboni, November 2010
bundle agent edit_sshd(file,params)
{
files:
  "$(file)"
  handle => "edit_sshd",
  comment => "Set desired sshd_config parameters",
  edit_line => set_config_values("$(params)"),
  classes => if_repaired("restart_sshd");
 
commands:
  restart_sshd.!no_restarts::
    "/etc/init.d/sshd restart"
    handle => "sshd_restart",
    comment => "Restart sshd if the configuration file was modified";
}
 
bundle edit_line set_config_values(v)
 
 # Sets the RHS of configuration items in the file of the form
 #   LHS RHS
 # If the line is commented out with #, it gets uncommented first.
 # Adds a new line if none exists.
 # The argument is an associative array containing v[LHS]="rhs"
 
 # Based on set_variable_values from cfengine_stdlib.cf, modified to
 # use whitespace as separator, and to handle commented-out lines.
 
{
vars:
  "index" slist => getindices("$(v)");
 
  # Be careful if the index string contains funny chars
  "cindex[$(index)]" string => canonify("$(index)");
 
field_edits:
 
  # If the line is there, but commented out, first uncomment it
  "#+$(index)\s+.*"
     edit_field => col("\s+","1","$(index)","set");
 
  # match a line starting like the key something
  "$(index)\s+.*"
     edit_field => col("\s+","2","$($(v)[$(index)])","set"),
        classes => if_ok("not_$(cindex[$(index)])");
 
insert_lines:
 
  "$(index) $($(v)[$(index)])",
      ifvarclass => "!not_$(cindex[$(index)])";
}

          
    View edit_sshd.cf 
  
  
      use_edit_sshd.cf
    
    
        Raw
      
    
    File suppressed. Click to show.
  
  
            1
            2
            3
            4
            5
            6
            7
            8
            9
            10
            11
            12
            13
          
          
            bundle agent configfiles
{
vars:
  "sshdconfig" string => "/etc/ssh/sshd_config";
 
  # SSHD configuration to set
  "sshd[Protocol]"                                string => "2";
  "sshd[X11Forwarding]"                           string => "yes";
  "sshd[UseDNS]"                                  string => "no";
 
methods:
  "sshd"    usebundle => edit_sshd("$(sshdconfig)", "configfiles.sshd");
}