diff --git a/templates/ssh/sshd_config.erb b/templates/ssh/sshd_config.erb index 558377283379c1b974ac493af7431e4b74a57065..b0f1ad117e4e3f9dd3c631b704a1e01727278db4 100644 --- a/templates/ssh/sshd_config.erb +++ b/templates/ssh/sshd_config.erb @@ -71,6 +71,7 @@ GSSAPIStoreCredentialsOnRekey yes AuthenticationMethods gssapi-with-mic,keyboard-interactive:pam password,keyboard-interactive:pam KerberosAuthentication yes <% end -%> + <%- if (@rootloginwithpswd == 'yes') -%> # Allow root login with a password (use with care!) PermitRootLogin yes