Add address masks

[mirror/dsa-puppet.git] / modules / ssh / templates / sshd_config.erb

diff --git a/modules/ssh/templates/sshd_config.erb b/modules/ssh/templates/sshd_config.erb
index 8463fe6..e51a8f6 100644 (file)
--- a/modules/ssh/templates/sshd_config.erb
+++ b/modules/ssh/templates/sshd_config.erb
@@ -54,7 +54,11 @@ Match Address <%=
   dbs = []
   allnodeinfo.keys.sort.each do |node|
       next unless allnodeinfo[node].has_key?('ipHostNumber')
-      dbs << allnodeinfo[node]['ipHostNumber']
+      if allnodeinfo[node]['ipHostNumber'] =~ ":"
+          dbs << "#{allnodeinfo[node]['ipHostNumber']}/128"
+      else
+          dbs << "#{allnodeinfo[node]['ipHostNumber']}/32"
+      end
   end
   dbs.flatten.join(',')
 %>