From: Tollef Fog Heen <tfheen@err.no>
Date: Sat, 13 Apr 2019 20:06:31 +0000 (+0200)
Subject: Add address masks
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=33d6523dae7e23cd732374d416f62b2a9e2eb2d9;p=mirror%2Fdsa-puppet.git

Add address masks
---

diff --git a/modules/ssh/templates/sshd_config.erb b/modules/ssh/templates/sshd_config.erb
index 8463fe600..e51a8f63b 100644
--- a/modules/ssh/templates/sshd_config.erb
+++ b/modules/ssh/templates/sshd_config.erb
@@ -54,7 +54,11 @@ Match Address <%=
   dbs = []
   allnodeinfo.keys.sort.each do |node|
       next unless allnodeinfo[node].has_key?('ipHostNumber')
-      dbs << allnodeinfo[node]['ipHostNumber']
+      if allnodeinfo[node]['ipHostNumber'] =~ ":"
+          dbs << "#{allnodeinfo[node]['ipHostNumber']}/128"
+      else
+          dbs << "#{allnodeinfo[node]['ipHostNumber']}/32"
+      end
   end
   dbs.flatten.join(',')
 %>