aboutsummaryrefslogtreecommitdiff
path: root/templates/sshd_config/Debian_normal.erb
diff options
context:
space:
mode:
Diffstat (limited to 'templates/sshd_config/Debian_normal.erb')
-rw-r--r--templates/sshd_config/Debian_normal.erb8
1 files changed, 6 insertions, 2 deletions
diff --git a/templates/sshd_config/Debian_normal.erb b/templates/sshd_config/Debian_normal.erb
index d9237c6..a1d7a45 100644
--- a/templates/sshd_config/Debian_normal.erb
+++ b/templates/sshd_config/Debian_normal.erb
@@ -52,8 +52,12 @@ HostbasedAuthentication no
# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords no
-# Uncomment to disable s/key passwords
-#ChallengeResponseAuthentication no
+# Change to no to disable s/key passwords
+<%- if real_sshd_challenge_response_authentication.to_s == 'yes' then %>
+ChallengeResponseAuthentication yes
+<%- else %>
+ChallengeResponseAuthentication no
+<%- end %>
# To disable tunneled clear text passwords, change to no here!
<%- if real_sshd_password_authentication.to_s == 'yes' then %>