corrections
This commit is contained in:
parent
0b878ece70
commit
fec4d3943a
@ -50,8 +50,8 @@
|
||||
|
||||
- name: Custom Modular Configuration
|
||||
template:
|
||||
src: "etc/ssh/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-60-shootthej.conf.j2"
|
||||
dest: "/etc/ssh/sshd_config.d/60-shootthej.conf"
|
||||
src: "etc/ssh/{{ ansible_distribution }}-{{ ansible_distribution_major_version }}-60-infra.conf.j2"
|
||||
dest: "/etc/ssh/sshd_config.d/60-infra.conf"
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0600'
|
||||
|
19
templates/etc/ssh/RedHat-9-60-infra.conf.j2
Normal file
19
templates/etc/ssh/RedHat-9-60-infra.conf.j2
Normal file
@ -0,0 +1,19 @@
|
||||
################################################################################
|
||||
# Below managed by Shoot the J Ltd.
|
||||
#
|
||||
Banner /etc/banner
|
||||
PermitRootLogin no
|
||||
Port 22
|
||||
X11Forwarding no
|
||||
LoginGraceTime 1m
|
||||
|
||||
# IPA
|
||||
AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
|
||||
AuthorizedKeysCommandUser nobody
|
||||
ChallengeResponseAuthentication yes
|
||||
|
||||
# IPA Automatic
|
||||
PubkeyAuthentication yes
|
||||
KerberosAuthentication no
|
||||
GSSAPIAuthentication yes
|
||||
UsePAM yes
|
1
templates/etc/ssh/Rocky-9-60-infra.conf.j2
Symbolic link
1
templates/etc/ssh/Rocky-9-60-infra.conf.j2
Symbolic link
@ -0,0 +1 @@
|
||||
RedHat-9-60-infra.conf.j2
|
Loading…
Reference in New Issue
Block a user