From beb2ecf5c909effb1774f22505ebb628abbbcc07 Mon Sep 17 00:00:00 2001
From: Zev Benjamin <zev@humbughq.com>
Date: Thu, 7 Feb 2013 18:06:19 -0500
Subject: [PATCH] puppet: Ensure that sshd is restarted after turning off
 password auth

(imported from commit 46fef98df9ea1d9ee4038f400cc7c8689d80a0ec)
---
 servers/puppet/modules/humbug/manifests/base.pp | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/servers/puppet/modules/humbug/manifests/base.pp b/servers/puppet/modules/humbug/manifests/base.pp
index d55ada1a98..310d9414bc 100644
--- a/servers/puppet/modules/humbug/manifests/base.pp
+++ b/servers/puppet/modules/humbug/manifests/base.pp
@@ -99,10 +99,12 @@ class humbug::base {
     ensure     => file,
   }
 
+  # TODO: we should really just have a known sshd_config file
   common::line { 'no_password_auth':
     file       => '/etc/ssh/sshd_config',
     line       => 'PasswordAuthentication no',
-    require    => Package['openssh-server'],
+    subscribe  => File['/etc/ssh/sshd_config'],
+    notify     => Service['ssh'],
   }
 
   service { 'ssh':