diff options
| author | Micah Anderson <micah@riseup.net> | 2008-09-26 17:05:49 -0400 |
|---|---|---|
| committer | Micah Anderson <micah@riseup.net> | 2008-09-26 17:05:49 -0400 |
| commit | 51c18b6b8f71a925e3c94b459dbc257f2466c453 (patch) | |
| tree | d8376a0656147243fd2aa9fb4c0170da49c08dd7 /templates/sshd_config/Debian_normal.erb | |
| parent | d6f9d64d9b0d8befcf7437b2fe69b6e378971794 (diff) | |
| download | puppet-sshd-51c18b6b8f71a925e3c94b459dbc257f2466c453.tar.gz puppet-sshd-51c18b6b8f71a925e3c94b459dbc257f2466c453.tar.bz2 | |
added sshd_challenge_response_authentication variable, with the default value set to no
Diffstat (limited to 'templates/sshd_config/Debian_normal.erb')
| -rw-r--r-- | templates/sshd_config/Debian_normal.erb | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/templates/sshd_config/Debian_normal.erb b/templates/sshd_config/Debian_normal.erb index d9237c6..a1d7a45 100644 --- a/templates/sshd_config/Debian_normal.erb +++ b/templates/sshd_config/Debian_normal.erb @@ -52,8 +52,12 @@ HostbasedAuthentication no # To enable empty passwords, change to yes (NOT RECOMMENDED) PermitEmptyPasswords no -# Uncomment to disable s/key passwords -#ChallengeResponseAuthentication no +# Change to no to disable s/key passwords +<%- if real_sshd_challenge_response_authentication.to_s == 'yes' then %> +ChallengeResponseAuthentication yes +<%- else %> +ChallengeResponseAuthentication no +<%- end %> # To disable tunneled clear text passwords, change to no here! <%- if real_sshd_password_authentication.to_s == 'yes' then %> |