<%=
out = []
-restrict_ssh = %w{lebrun logtest01 geo1 geo2 geo3 beethoven tchaikovsky schroeder heininen handel lotti}
+restricted_purposes = {'kvm host', 'central syslog server', 'puppet master', 'jumphost'}
+restrict_ssh = %w{lebrun logtest01 geo1 geo2 geo3 beethoven tchaikovsky schroeder rossini draghi}
+
+if (nodeinfo['ldap'].has_key?('purpose')) then
+ nodeinfo['ldap']['purpose'].each do |purp|
+ if restricted_purposes.include?(purp) then
+ restrict_ssh << hostname
+ end
+ end
+end
ssh4allowed = []
ssh6allowed = []
ssh4allowed << '$CARNET'
ssh4allowed << '$BUILDD_SSH_ACCESS'
end
-if %w{beethoven}.include?(hostname) then
+if %w{beethoven draghi}.include?(hostname) then
ssh4allowed << '$HOST_DEBIAN_V4'
ssh6allowed << '$HOST_DEBIAN_V6'
end