Solaris 10 config options issue

[ghoneycutt]

Solaris 10 config options issue

[Phil-Friderici]

+1 having seen the same issue here. Hope I can find time soon to create & propose a fix.

[Phil-Friderici]

v3.43.0 is the last version that does not break on Solaris.

[Phil-Friderici]

Thanks to @nalyanyam I got a list of Solaris incompatible parameters:

KerberosOrLocalPasswd - not valid
KerberosTicketCleanup - not valid
KerberosGetAFSToken - not valid
TCPKeepAlive - not valid
ShowPatchLevel - not valid
MaxSessions - not valid
PermitTunnel - not valid

We should find a way to exclude them from Solaris SSHd for the future.
Two way come into my mind here:

• Solaris specific template without the incompatible parameters
• enable the template to print out lines only if the value is not undef and set OS default accordingly

I would prefer last one as it could help in other situattions too.
@ghoneycutt What do you think ?

[ghoneycutt]

I'd like to keep one template and configure it so that if a setting is undef it will not show up.

[ghoneycutt]

Perhaps we could tap into E's Jenkins service and get a few Solaris VM's. We could build a job that runs the code from a PR and tests it on a Solaris VM with serverspec and then reverts the VM. This would give us an automated way to ensure Solaris is good.

[Phil-Friderici]

@ghoneycutt Having some Jenkins magic to verify compatibility would be awesome. Getting an environment for full automated testing is on my wish list. Just I believe this will take some time before I can start working into that direction.

[Phil-Friderici]

But I will start working on an suggestion for the template.

One detail come into my mind; in Hiera it is not possible to override a value to become undef once it is set. Therefore I think it would be good to have an alternative 'stop word' beside undef.

[nalyanyam]

@Phil-Friderici These settings in ssh_config are also not valid on Solaris

AddressFamily
Tunnel
TunnelDevice
PermitLocalCommand
HashKnownHosts

[Phil-Friderici]

There is my suggestion how to fix the incompatible parameters on Solaris: #213

@ghoneycutt if this goes into the right direction, I'll add the same for the other parameters.

[Phil-Friderici]

Hiera does not allow reseting a specified value back to undef again. As workaround I have added the value 'unset' which does that.

@nalyanyam To address the Solaris incompatible parameters I have take care that each changeable parameter can take 'unset' as value. This will not add the parameter to the configuration files anymore.

I was only able to do that for the already parameterized parameters. Don't know how to progress with the other incompatible parameters. Please see/test the code from the PR #213.

ssh_config
AddressFamily
Tunnel
TunnelDevice
PermitLocalCommand

sshd_config
KerberosOrLocalPasswd
KerberosTicketCleanup
KerberosGetAFSToken
ShowPatchLevel

[ghoneycutt]

Thanks everyone! Released in v3.49.1