Skip to content
Snippets Groups Projects
Verified Commit 9c24ddb0 authored by Adam Lewenberg's avatar Adam Lewenberg
Browse files

remove some deprecated ssh options

parent 3cf88a91
No related branches found
No related tags found
1 merge request!7Puppet5 lonlone
Hide whitespace changes
Inline Side-by-side
NEWS
+ 6
− 0
View file @ 9c24ddb0
unreleased (207x-xx-xx) unreleased (207x-xx-xx)
[ssh] Remove the two options "RSAAuthentication" and
"RhostsRSAAuthentication" that have been deprecated and are only used
with SSH's protocol 1 (which we don't use anyway). See
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851573 and
https://anonscm.debian.org/cgit/pkg-ssh/openssh.git/commit/?id=fb87db8aa47d3508be8e5bb1d21897fa1f2eca90
[os] motd.erb needs to handle case when there is no swap. [os] motd.erb needs to handle case when there is no swap.
[several] change 'crit "stuff"' to 'crit("stuff")' to make Puppet 5 [several] change 'crit "stuff"' to 'crit("stuff")' to make Puppet 5
......
templates/ssh/sshd_config.erb
+ 0
− 2
View file @ 9c24ddb0
...@@ -53,9 +53,7 @@ UsePrivilegeSeparation yes ...@@ -53,9 +53,7 @@ UsePrivilegeSeparation yes
# Disable all forms of host-based and public key authentication by default, # Disable all forms of host-based and public key authentication by default,
# since we use GSS-API (or passwords). # since we use GSS-API (or passwords).
IgnoreRhosts yes IgnoreRhosts yes
RSAAuthentication no
PubkeyAuthentication <%= @pubkey ? 'yes' : 'no' %> PubkeyAuthentication <%= @pubkey ? 'yes' : 'no' %>
RhostsRSAAuthentication no
HostbasedAuthentication <%= @hostbased ? 'yes' : 'no' %> HostbasedAuthentication <%= @hostbased ? 'yes' : 'no' %>
# Allow password authentication via PAM, but not empty passwords. # Allow password authentication via PAM, but not empty passwords.
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment