Browse Source
Merge pull request #72 from kyrias/AuthKeysCmd
Add AuthorizedKeysCommand supportmaster
Forrest
8 years ago
2 changed files with 4 additions and 0 deletions
+ 2
- 0
openssh/files/sshd_config
View File
| {{ option_default_uncommented('RSAAuthentication', 'yes') }} | {{ option_default_uncommented('RSAAuthentication', 'yes') }} | ||||
| {{ option_default_uncommented('PubkeyAuthentication', 'yes') }} | {{ option_default_uncommented('PubkeyAuthentication', 'yes') }} | ||||
| {{ option('AuthorizedKeysFile', '%h/.ssh/authorized_keys') }} | {{ option('AuthorizedKeysFile', '%h/.ssh/authorized_keys') }} | ||||
| {{ option('AuthorizedKeysCommand', 'none') }} | |||||
| {{ option('AuthorizedKeysCommandUser', 'nobody') }} | |||||
| # Don't read the user's ~/.rhosts and ~/.shosts files | # Don't read the user's ~/.rhosts and ~/.shosts files | ||||
| {{ option_default_uncommented('IgnoreRhosts', 'yes') }} | {{ option_default_uncommented('IgnoreRhosts', 'yes') }} |
+ 2
- 0
pillar.example
View File
| MaxSessions: 10 | MaxSessions: 10 | ||||
| RSAAuthentication: 'yes' | RSAAuthentication: 'yes' | ||||
| PubkeyAuthentication: 'yes' | PubkeyAuthentication: 'yes' | ||||
| AuthorizedKeysCommand: '/usr/bin/sss_ssh_authorizedkeys' | |||||
| AuthorizedKeysCommandUser: 'nobody' | |||||
| IgnoreRhosts: 'yes' | IgnoreRhosts: 'yes' | ||||
| RhostsRSAAuthentication: 'no' | RhostsRSAAuthentication: 'no' | ||||
| HostbasedAuthentication: 'no' | HostbasedAuthentication: 'no' |
Loading…