saltstack-formulas/openssh-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #72 from kyrias/AuthKeysCmd

Browse Source 
Add AuthorizedKeysCommand support
This commit is contained in:
Forrest 2016-10-02 11:59:37 -07:00 committed by GitHub
commit 8d1e730907
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openssh/files/sshd_config
View File

@ -81,6 +81,8 @@
{{ option_default_uncommented('RSAAuthentication', 'yes') }} {{ option_default_uncommented('RSAAuthentication', 'yes') }}
{{ option_default_uncommented('PubkeyAuthentication', 'yes') }} {{ option_default_uncommented('PubkeyAuthentication', 'yes') }}
{{ option('AuthorizedKeysFile', '%h/.ssh/authorized_keys') }} {{ option('AuthorizedKeysFile', '%h/.ssh/authorized_keys') }}
{{ option('AuthorizedKeysCommand', 'none') }}
{{ option('AuthorizedKeysCommandUser', 'nobody') }}
# Don't read the user's ~/.rhosts and ~/.shosts files # Don't read the user's ~/.rhosts and ~/.shosts files
{{ option_default_uncommented('IgnoreRhosts', 'yes') }} {{ option_default_uncommented('IgnoreRhosts', 'yes') }}

2
pillar.example
View File

@ -21,6 +21,8 @@ sshd_config:
MaxSessions: 10 MaxSessions: 10
RSAAuthentication: 'yes' RSAAuthentication: 'yes'
PubkeyAuthentication: 'yes' PubkeyAuthentication: 'yes'
AuthorizedKeysCommand: '/usr/bin/sss_ssh_authorizedkeys'
AuthorizedKeysCommandUser: 'nobody'
IgnoreRhosts: 'yes' IgnoreRhosts: 'yes'
RhostsRSAAuthentication: 'no' RhostsRSAAuthentication: 'no'
HostbasedAuthentication: 'no' HostbasedAuthentication: 'no'