I've uploaded version 0.2 of ssh::auth to
http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleSSHAuth .
Version 0.2 is a bug fix release. It fixes a variable inheritance problem that
caused clients and servers to not be able to install keys.
ssh::auth is a Puppet module that provides centralized creation,
distribution, and revocation of ssh keys for users. Features:
* Each user may have one or more ssh key pairs, centrally created on the
keymaster and distributed to servers and clients.
* Each key pair may be installed onto any set of clients, and enabled for
authentication as any user(s) on any set of servers.
* Keys may have login options set as in authorized_keys(5), e.g. to force
certain commands to run or limit port forwarding.
* Keys can be uninstalled or revoked, either manually or automatically at
given intervals, and new ones automatically created and distributed.
Installation is easy, as it's just one file.
ssh::auth aims to provide a complete solution for managing ssh keys for
users, with a well-defined and -documented interface. There's a comparison
to the other ssh-related tools available in Puppet at
http://reductivelabs.com/trac/puppet/wiki/Recipes/ModuleSSHAuth#comparisons
.
Andrew.