# for now this will have to be done manually
if $::portforwarder_user_exists {
- if ! $::portforwarder_key {
- exec { 'create-portforwarder-key':
- command => '/bin/su - portforwarder -c \'mkdir -p -m 02700 .ssh && ssh-keygen -C "`whoami`@`hostname` (`date +%Y-%m-%d`)" -P "" -f .ssh/id_rsa -q\'',
- onlyif => '/usr/bin/getent passwd portforwarder > /dev/null && ! [ -e /home/portforwarder/.ssh/id_rsa ]'
- }
- }
+ ssh::keygen {'portforwarder': }
file { '/etc/ssh/userkeys/portforwarder':
content => template('portforwarder/authorized_keys.erb'),