ssh and sudoers updates for AD.
This commit is contained in:
parent
1a46b88a0b
commit
4ddb88fef3
3 changed files with 19 additions and 13 deletions
|
|
@ -9,3 +9,9 @@ PermitRootLogin prohibit-password
|
|||
StreamLocalBindUnlink yes
|
||||
Subsystem sftp internal-sftp
|
||||
X11Forwarding no
|
||||
|
||||
Match Group "System Admins"
|
||||
AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
|
||||
AuthorizedKeysCommandUser root
|
||||
AuthenticationMethods "publickey"
|
||||
# ,password"
|
||||
|
|
|
|||
|
|
@ -5,4 +5,4 @@ tadgy ALL=(root) ALL
|
|||
sysadmin ALL=(root) NOPASSWD: ALL
|
||||
|
||||
## Allow the Active Directory domain administrators access to root without a password.
|
||||
%Domain\ Admins@slackware.uk.internal ALL=(root) NOPASSWD: ALL
|
||||
%Systems\ Admins@slackware.uk.internal ALL=(root) NOPASSWD: ALL
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue