Browse Source

do not set UsePAM on OpenBSD

Upstream opensshd does not support PAM
tags/v0.41.0
Eric Cook 8 years ago
parent
commit
686fc2c4ee
1 changed files with 2 additions and 0 deletions
  1. +2
    -0
      openssh/files/sshd_config

+ 2
- 0
openssh/files/sshd_config View File



{{ option_default_uncommented('Subsystem', 'sftp /usr/lib/openssh/sftp-server') }} {{ option_default_uncommented('Subsystem', 'sftp /usr/lib/openssh/sftp-server') }}


{% if not salt['grains.get']('os') == 'OpenBSD' -%}
# Set this to 'yes' to enable PAM authentication, account processing, # Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will # and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and # be allowed through the ChallengeResponseAuthentication and
# PAM authentication, then enable this but set PasswordAuthentication # PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'. # and ChallengeResponseAuthentication to 'no'.
{{ option_default_uncommented('UsePAM', 'yes') }} {{ option_default_uncommented('UsePAM', 'yes') }}
{%- endif %}


# DNS resolve and map remote IP addresses # DNS resolve and map remote IP addresses
{{ option('UseDNS', 'yes') }} {{ option('UseDNS', 'yes') }}

Loading…
Cancel
Save