Update ssh configs for admins login.
This commit is contained in:
parent
4de1d1da3b
commit
8558e9f74c
4 changed files with 31 additions and 5 deletions
15
etc/pam.d/sshd-sysadmins
Normal file
15
etc/pam.d/sshd-sysadmins
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
auth required pam_permit.so
|
||||
|
||||
account required pam_permit.so
|
||||
|
||||
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
|
||||
session required pam_loginuid.so
|
||||
session optional pam_keyinit.so force revoke
|
||||
session optional pam_umask.so
|
||||
session optional pam_motd.so motd=/run/motd.dynamic # /etc/motd is handled by sshd.
|
||||
session required pam_limits.so
|
||||
session required pam_env.so
|
||||
session required pam_env.so envfile=/etc/default/locale
|
||||
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
|
||||
session optional pam_mkhomedir.so
|
||||
session required pam_permit.so
|
||||
|
|
@ -5,3 +5,8 @@ Host *
|
|||
SendEnv LANG LC_*
|
||||
VerifyHostKeyDNS yes
|
||||
VisualHostKey yes
|
||||
|
||||
Host *.slackware.uk.internal *.slackware.uk.net
|
||||
GSSAPIAuthentication yes
|
||||
GSSAPIDelegateCredentials yes
|
||||
Port 25422
|
||||
|
|
|
|||
|
|
@ -3,15 +3,20 @@ Include /etc/ssh/sshd_config.d/*.conf
|
|||
Port 25422
|
||||
|
||||
AcceptEnv LANG LC_*
|
||||
GSSAPICleanupCredentials yes
|
||||
GSSAPIStrictAcceptorCheck yes
|
||||
LoginGraceTime 30
|
||||
MaxStartups 5
|
||||
PermitRootLogin prohibit-password
|
||||
StreamLocalBindUnlink yes
|
||||
Subsystem sftp internal-sftp
|
||||
UsePAM yes
|
||||
X11Forwarding no
|
||||
|
||||
Match Group "System Admins"
|
||||
Match Group "SLACKWAREUKINT\systems' admins"
|
||||
AuthenticationMethods publickey
|
||||
#,password publickey,keyboard-interactive
|
||||
AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
|
||||
AuthorizedKeysCommandUser root
|
||||
AuthenticationMethods "publickey"
|
||||
# ,password"
|
||||
GSSAPIAuthentication yes
|
||||
PAMServiceName sshd-sysadmins
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue