4c44fc6679
update_ssh.pl: replace read of /etc/passwd by pwgetent() call, small and not so small fixes (VRF 1.2.0) Fixes!!!
53 lines
1.7 KiB
Plaintext
53 lines
1.7 KiB
Plaintext
#******************************************************************************
|
|
# manage_ssh.sh configuration file
|
|
#******************************************************************************
|
|
#
|
|
# Lines starting with '#' (hash) are comment lines
|
|
#
|
|
# Format: option=<value>
|
|
#
|
|
# Use double or single quotes around the option values in case of strings.
|
|
#
|
|
|
|
# name of the user account performing the SSH controls copies
|
|
# (leave blank for current user)
|
|
SSH_TRANSFER_USER=""
|
|
|
|
# name of the OS group that should own the SSH controls files
|
|
SSH_OWNER_GROUP="sshadmin"
|
|
|
|
# whether a 'chmod' needs to be executed after each sftp transfer [0=Yes; 1=No]
|
|
DO_SFTP_CHMOD=0
|
|
|
|
# extra arguments/options for the SFTP command
|
|
SFTP_ARGS="-o StrictHostKeyChecking=no -o ConnectTimeout=10 -b - "
|
|
|
|
# extra arguments/options for the SSH command
|
|
SSH_ARGS="-o StrictHostKeyChecking=no -o ConnectTimeout=10 -n"
|
|
|
|
# location of the local SSH controls directory
|
|
LOCAL_DIR="/etc/ssh_master"
|
|
|
|
# location of the remote SSH controls directory
|
|
REMOTE_DIR="/etc/ssh_controls/holding"
|
|
|
|
# name of the user account performing the SSH controls update
|
|
# (leave blank for current user but user should have remote sudo root privs)
|
|
SSH_UPDATE_USER=""
|
|
|
|
# options to pass to update_ssh.pl when executing a key update
|
|
SSH_UPDATE_OPTS="--verbose --remove"
|
|
|
|
# maximum number of background process to spawn (~maxuprc, ~nstrpty etc)
|
|
MAX_BACKGROUND_PROCS=30
|
|
|
|
# location of the backup directory (for configuration & key files)
|
|
BACKUP_DIR="${LOCAL_DIR}/backup"
|
|
|
|
# location of log directory (default), see --log-dir)
|
|
LOG_DIR="/var/log"
|
|
|
|
#******************************************************************************
|
|
# End of FILE
|
|
#******************************************************************************
|