D4129.id10829.diff
No OneTemporary
Actions

Size

992 B

Referenced Files

None

Subscribers

None

D4129.id10829.diff
View Options

	diff --git a/roles/bastion/sshd-otp/files/sshd_config b/roles/bastion/sshd-otp/files/sshd_config
	--- a/roles/bastion/sshd-otp/files/sshd_config
	+++ b/roles/bastion/sshd-otp/files/sshd_config
	@@ -22,7 +22,7 @@
	# In this SSH configuration, we can use PAM modules with challenge/response.
	# This allows to use PAM provided capabilities like OTP (Yubikey, OPIE).
	PasswordAuthentication no
	-ChallengeResponseAuthentication yes
	+KbdInteractiveAuthentication yes
	UsePAM yes

	# Misc options
	diff --git a/roles/core/sshd/files/sshd_config b/roles/core/sshd/files/sshd_config
	--- a/roles/core/sshd/files/sshd_config
	+++ b/roles/core/sshd/files/sshd_config
	@@ -39,7 +39,7 @@
	# Nasqueron servers authentication should only occur through SSH keys
	# but PAM can offer extra capabilities if needed like OTP.
	PasswordAuthentication no
	-ChallengeResponseAuthentication no
	+KbdInteractiveAuthentication no
	UsePAM yes

	# Once the core role has been applied to a server, ops users have been created