Skip to content

Commit

Permalink
Extend GSSAPI configuration support to ssh_config
Browse files Browse the repository at this point in the history
Previously, the ssh_gssapi_support variable only toggled the GSSAPI
settings in sshd_config.

Through this change, setting ssh_gssapi_support to true also enables
support in ssh_config.

It enables both authentication and credential delegation.
  • Loading branch information
wzzrd committed Feb 12, 2021
1 parent 70cd7bb commit 3344071
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions roles/ssh_hardening/templates/openssh.conf.j2
Original file line number Diff line number Diff line change
Expand Up @@ -104,8 +104,8 @@ RSAAuthentication yes
PasswordAuthentication {{ 'yes' if ssh_client_password_login else 'no' }}

# Only use GSSAPIAuthentication if implemented on the network.
GSSAPIAuthentication no
GSSAPIDelegateCredentials no
GSSAPIAuthentication {{ 'yes' if ssh_gssapi_support else 'no' }}
GSSAPIDelegateCredentials {{ 'yes' if ssh_gssapi_support else 'no' }}

# Disable tunneling
Tunnel no
Expand Down

0 comments on commit 3344071

Please sign in to comment.