$sshkey_type = 'absent',
$membership = 'minimum',
$ticket = false,
- $tag = false) {
+ $tag = false,
+ $refresh_keys = false) {
if $password != 'absent' {
tag => $tag,
}
+ if $refresh_keys == true {
+ cron { "gpg-refresh-keys-${title}":
+ command => "/usr/bin/gpg --refresh-keys > /dev/null 2>&1",
+ user => $title,
+ hour => "*/1",
+ minute => "0",
+ ensure => present,
+ require => User[$title],
+ }
+ }
+
# lots of bugs preventing a good implementation for ssh keys
# http://projects.reductivelabs.com/issues/1409
# http://projects.reductivelabs.com/issues/2004