diff options
| author | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2009-12-03 10:55:59 -0800 |
|---|---|---|
| committer | Stephen Hemminger <stephen.hemminger@vyatta.com> | 2009-12-03 10:55:59 -0800 |
| commit | a83faa7789ddb8c930a973774e5cedf062e10919 (patch) | |
| tree | 30419b551f7242518182ac13e2440e878eb9c089 /templates/system | |
| parent | ee87a223623a80469beec50a2c0b6c0c121fe99b (diff) | |
| download | vyatta-cfg-system-a83faa7789ddb8c930a973774e5cedf062e10919.tar.gz vyatta-cfg-system-a83faa7789ddb8c930a973774e5cedf062e10919.zip | |
SSH enhancements
Add public key support
Convert allow-root and password-authentication from boolean nodes to
regular nodes.
Diffstat (limited to 'templates/system')
3 files changed, 20 insertions, 0 deletions
diff --git a/templates/system/login/user/node.tag/authorized-keys/node.def b/templates/system/login/user/node.tag/authorized-keys/node.def new file mode 100644 index 00000000..1587fa46 --- /dev/null +++ b/templates/system/login/user/node.tag/authorized-keys/node.def @@ -0,0 +1,14 @@ +tag: +type: txt +help: Set public keys for authorized login + +syntax:expression: pattern $VAR(@) "^[0-9A-Za-z+/=]*$" ; "Invalid public key not base-64" + +comp_help: + Public key of remote user allowed to login without password + The key must be encode as base-64 text string. The key is usually + several hundred bytes long (because of the size of the public key + encoding). You don't want to type them in; instead, use the + script ssh-load-key to set them. + + diff --git a/templates/system/login/user/node.tag/authorized-keys/node.tag/description/node.def b/templates/system/login/user/node.tag/authorized-keys/node.tag/description/node.def new file mode 100644 index 00000000..7c81ff12 --- /dev/null +++ b/templates/system/login/user/node.tag/authorized-keys/node.tag/description/node.def @@ -0,0 +1,2 @@ +type: txt +help: Ssh public-key description (usually user@host) diff --git a/templates/system/login/user/node.tag/authorized-keys/node.tag/type/node.def b/templates/system/login/user/node.tag/authorized-keys/node.tag/type/node.def new file mode 100644 index 00000000..54482824 --- /dev/null +++ b/templates/system/login/user/node.tag/authorized-keys/node.tag/type/node.def @@ -0,0 +1,4 @@ +type: txt +help: Public key type +allowed: echo "ssh-dsa ssh-rsa" +syntax:expression: $VAR(@) in "ssh-rsa", "ssh-dsa" |