In s future version of Puppet templates using local variables when they
really should be using instance variable will stop working. So, let's fix
it now.

Adam Seishas authored 8 years ago and Karl Kornel committed 8 years ago

sshd_config.erb: If PasswordAuthentication is disabled, also remove this method from AuthenticationMethods

Adam Seishas authored 8 years ago and Karl Kornel committed 8 years ago

ssh::config::sshd: Add parameters to selectively enable Ed25519 host keys and/or disable password authentication

For Stanford repositories, we’ve got a list of Ubuntu dsitros that map to Debian distros.  That list is updated.

Add two new parameters. The first is to add a line to the krb5.conf file
indicating that we prefer TCP. The other is a parameter stating which
kerberos environment we want: prod, test, or uat.

Some changes (such as the major changes to WIN.SLAC.STANFORD.EDU) were not
copied to the template file.

We don't have anycast DNS in Livermore, so this adds a parameter to base::dns,
a parameter that can be set via Hiera, to put Livermore's DNS server at (or
near) the top of the list.

On April 29, the Networking team notified all LNAs that the legacy "C" DNS
servers are being retired on November 1, and that they will start notifying
sysadmins this month if their systems are still querying the old DNS servers.