diff options
author | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-04-20 18:06:28 +0200 |
---|---|---|
committer | Ismaël Bouya <ismael.bouya@normalesup.org> | 2019-04-20 18:06:28 +0200 |
commit | ea7bf00c5af841b6f3980cb8d957daec5e609422 (patch) | |
tree | b59da1526fba49ccd56221f0c544ac90855e1379 /nixops/modules/ssh/ldap_authorized_keys.sh | |
parent | 926a4007ae464c08363c75aa177d978d803366a6 (diff) | |
download | Nix-ea7bf00c5af841b6f3980cb8d957daec5e609422.tar.gz Nix-ea7bf00c5af841b6f3980cb8d957daec5e609422.tar.zst Nix-ea7bf00c5af841b6f3980cb8d957daec5e609422.zip |
Move ssh ldap password to a secure location
Related issue: https://git.immae.eu/mantisbt/view.php?id=122
Diffstat (limited to 'nixops/modules/ssh/ldap_authorized_keys.sh')
-rwxr-xr-x | nixops/modules/ssh/ldap_authorized_keys.sh | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/nixops/modules/ssh/ldap_authorized_keys.sh b/nixops/modules/ssh/ldap_authorized_keys.sh index d869d74..d556452 100755 --- a/nixops/modules/ssh/ldap_authorized_keys.sh +++ b/nixops/modules/ssh/ldap_authorized_keys.sh | |||
@@ -3,13 +3,15 @@ | |||
3 | LDAPSEARCH=ldapsearch | 3 | LDAPSEARCH=ldapsearch |
4 | KEY="immaeSshKey" | 4 | KEY="immaeSshKey" |
5 | LDAP_BIND="cn=ssh,ou=services,dc=immae,dc=eu" | 5 | LDAP_BIND="cn=ssh,ou=services,dc=immae,dc=eu" |
6 | #LDAP_PASS="password taken from environment" | 6 | LDAP_PASS=$(cat /etc/ssh/ldap_password) |
7 | LDAP_HOST="ldap.immae.eu" | 7 | LDAP_HOST="ldap.immae.eu" |
8 | LDAP_MEMBER="cn=users,cn=ssh,ou=services,dc=immae,dc=eu" | 8 | LDAP_MEMBER="cn=users,cn=ssh,ou=services,dc=immae,dc=eu" |
9 | LDAP_GITOLITE_MEMBER="cn=users,cn=gitolite,ou=services,dc=immae,dc=eu" | 9 | LDAP_GITOLITE_MEMBER="cn=users,cn=gitolite,ou=services,dc=immae,dc=eu" |
10 | LDAP_PUB_RESTRICT_MEMBER="cn=restrict,cn=pub,ou=services,dc=immae,dc=eu" | 10 | LDAP_PUB_RESTRICT_MEMBER="cn=restrict,cn=pub,ou=services,dc=immae,dc=eu" |
11 | LDAP_PUB_FORWARD_MEMBER="cn=forward,cn=pub,ou=services,dc=immae,dc=eu" | 11 | LDAP_PUB_FORWARD_MEMBER="cn=forward,cn=pub,ou=services,dc=immae,dc=eu" |
12 | LDAP_BASE="dc=immae,dc=eu" | 12 | LDAP_BASE="dc=immae,dc=eu" |
13 | GITOLITE_SHELL=$(which gitolite-shell) | ||
14 | ECHO=$(which echo) | ||
13 | 15 | ||
14 | suitable_for() { | 16 | suitable_for() { |
15 | type_for="$1" | 17 | type_for="$1" |