saltstack-formulas/openssh-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

do not set UsePAM on OpenBSD

Browse Source 
Upstream opensshd does not support PAM
This commit is contained in:
Eric Cook 2017-01-14 18:38:37 -05:00
parent 086937b84f
commit 686fc2c4ee
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openssh/files/sshd_config
View File

@ -134,6 +134,7 @@
{{ option_default_uncommented('Subsystem', 'sftp /usr/lib/openssh/sftp-server') }} {{ option_default_uncommented('Subsystem', 'sftp /usr/lib/openssh/sftp-server') }}
{% if not salt['grains.get']('os') == 'OpenBSD' -%}
# Set this to 'yes' to enable PAM authentication, account processing, # Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will # and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and # be allowed through the ChallengeResponseAuthentication and
@ -144,6 +145,7 @@
# PAM authentication, then enable this but set PasswordAuthentication # PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'. # and ChallengeResponseAuthentication to 'no'.
{{ option_default_uncommented('UsePAM', 'yes') }} {{ option_default_uncommented('UsePAM', 'yes') }}
{%- endif %}
# DNS resolve and map remote IP addresses # DNS resolve and map remote IP addresses
{{ option('UseDNS', 'yes') }} {{ option('UseDNS', 'yes') }}