From a83faa7789ddb8c930a973774e5cedf062e10919 Mon Sep 17 00:00:00 2001
From: Stephen Hemminger <stephen.hemminger@vyatta.com>
Date: Thu, 3 Dec 2009 10:55:59 -0800
Subject: SSH enhancements

Add public key support
Convert allow-root and password-authentication from boolean nodes to
regular nodes.
---
 .../system/login/user/node.tag/authorized-keys/node.def    | 14 ++++++++++++++
 .../node.tag/authorized-keys/node.tag/description/node.def |  2 ++
 .../user/node.tag/authorized-keys/node.tag/type/node.def   |  4 ++++
 3 files changed, 20 insertions(+)
 create mode 100644 templates/system/login/user/node.tag/authorized-keys/node.def
 create mode 100644 templates/system/login/user/node.tag/authorized-keys/node.tag/description/node.def
 create mode 100644 templates/system/login/user/node.tag/authorized-keys/node.tag/type/node.def

(limited to 'templates/system')

diff --git a/templates/system/login/user/node.tag/authorized-keys/node.def b/templates/system/login/user/node.tag/authorized-keys/node.def
new file mode 100644
index 00000000..1587fa46
--- /dev/null
+++ b/templates/system/login/user/node.tag/authorized-keys/node.def
@@ -0,0 +1,14 @@
+tag:
+type: txt
+help: Set public keys for authorized login
+
+syntax:expression: pattern $VAR(@) "^[0-9A-Za-z+/=]*$" ; "Invalid public key not base-64"
+
+comp_help: 
+   Public key of remote user allowed to login without password
+   The key must be encode as base-64 text string. The key is usually
+   several hundred bytes long (because of the size of the public key
+   encoding).  You don't want to type them in; instead, use the
+   script ssh-load-key to set them.
+
+
diff --git a/templates/system/login/user/node.tag/authorized-keys/node.tag/description/node.def b/templates/system/login/user/node.tag/authorized-keys/node.tag/description/node.def
new file mode 100644
index 00000000..7c81ff12
--- /dev/null
+++ b/templates/system/login/user/node.tag/authorized-keys/node.tag/description/node.def
@@ -0,0 +1,2 @@
+type: txt
+help: Ssh public-key description (usually user@host)
diff --git a/templates/system/login/user/node.tag/authorized-keys/node.tag/type/node.def b/templates/system/login/user/node.tag/authorized-keys/node.tag/type/node.def
new file mode 100644
index 00000000..54482824
--- /dev/null
+++ b/templates/system/login/user/node.tag/authorized-keys/node.tag/type/node.def
@@ -0,0 +1,4 @@
+type: txt
+help: Public key type
+allowed: echo "ssh-dsa ssh-rsa"
+syntax:expression: $VAR(@) in "ssh-rsa", "ssh-dsa"
-- 
cgit v1.2.3