remote KerberosGetAFSToken, its actually not a functional configuration option, even...

diff --git a/manifests/init.pp b/manifests/init.pp
index 002b92742a5a45d74176631172616ff67b6168fe..90b7c64ab2c267df3c858afaa69593038b760b21 100644 (file)
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -84,11 +84,6 @@
 #                               Valid values: yes or no
 #                               Default: no
 #
-# sshd_kerberos_getafstoken:    If AFS is active and user has a Kerberos 5 TGT, attempt to
-#                               acquire an AFS token before accessing the user's home directory.
-#                               Valid values: yes or no
-#                               Default: no
-#
 # sshd_kerberos_orlocalpasswd:  If password authentication through Kerberos fails, then the password
 #                               will be validated via any additional local mechanism.
 #                               Valid values: yes or no
@@ -192,9 +187,6 @@ class sshd {
   case $sshd_kerberos_authentication {
     '': { $sshd_kerberos_authentication = 'no' }
   }
-  case $sshd_kerberos_getafstoken {
-    '': { $sshd_kerberos_getafstoken = 'no' }
-  }
   case $sshd_kerberos_orlocalpasswd {
     '': { $sshd_kerberos_orlocalpasswd = 'yes' }
   }

diff --git a/templates/sshd_config/Debian_squeeze.erb b/templates/sshd_config/Debian_squeeze.erb
index 9f91c16f1f84ac3bd87595bb52f18576759ef9cf..cfdd29157123e7048f4912392bf6a1a54c01b7db 100644 (file)
--- a/templates/sshd_config/Debian_squeeze.erb
+++ b/templates/sshd_config/Debian_squeeze.erb
@@ -117,11 +117,6 @@ KerberosAuthentication yes
 <%- else -%>
 KerberosAuthentication no
 <%- end -%>
-<%- if sshd_kerberos_getafstoken.to_s == 'yes' then -%>
-KerberosGetAFSToken yes
-<%- else -%>
-KerberosGetAFSToken no
-<%- end -%>
 <%- if sshd_kerberos_orlocalpasswd.to_s == 'yes' then -%>
 KerberosOrLocalPasswd yes
 <%- else -%>