Update ssh configs for admins login.

This commit is contained in:
Darren 'Tadgy' Austin 2026-04-28 20:28:30 +01:00
commit 8558e9f74c
4 changed files with 31 additions and 5 deletions

15
etc/pam.d/sshd-sysadmins Normal file
View file

@ -0,0 +1,15 @@
auth required pam_permit.so
account required pam_permit.so
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session required pam_loginuid.so
session optional pam_keyinit.so force revoke
session optional pam_umask.so
session optional pam_motd.so motd=/run/motd.dynamic # /etc/motd is handled by sshd.
session required pam_limits.so
session required pam_env.so
session required pam_env.so envfile=/etc/default/locale
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
session optional pam_mkhomedir.so
session required pam_permit.so

View file

@ -5,3 +5,8 @@ Host *
SendEnv LANG LC_*
VerifyHostKeyDNS yes
VisualHostKey yes
Host *.slackware.uk.internal *.slackware.uk.net
GSSAPIAuthentication yes
GSSAPIDelegateCredentials yes
Port 25422

View file

@ -3,15 +3,20 @@ Include /etc/ssh/sshd_config.d/*.conf
Port 25422
AcceptEnv LANG LC_*
GSSAPICleanupCredentials yes
GSSAPIStrictAcceptorCheck yes
LoginGraceTime 30
MaxStartups 5
PermitRootLogin prohibit-password
StreamLocalBindUnlink yes
Subsystem sftp internal-sftp
UsePAM yes
X11Forwarding no
Match Group "System Admins"
Match Group "SLACKWAREUKINT\systems' admins"
AuthenticationMethods publickey
#,password publickey,keyboard-interactive
AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
AuthorizedKeysCommandUser root
AuthenticationMethods "publickey"
# ,password"
GSSAPIAuthentication yes
PAMServiceName sshd-sysadmins