aboutsummaryrefslogtreecommitdiffstats
path: root/roles/space_server/tasks
diff options
context:
space:
mode:
authorEmil Renner Berthing <esmil@labitat.dk>2017-11-20 20:53:39 +0100
committerEmil Renner Berthing <esmil@labitat.dk>2017-11-20 20:53:39 +0100
commitfbdea6d790ced4075195cdd663ac420a7dc5857b (patch)
treed94256c8df7ca9c44b3340cdad008a7e8fe3b154 /roles/space_server/tasks
parent15192cfeae1ff05c888aa0dab6ac1236646dba14 (diff)
downloadlabitat-ansible-fbdea6d790ced4075195cdd663ac420a7dc5857b.tar.gz
labitat-ansible-fbdea6d790ced4075195cdd663ac420a7dc5857b.tar.xz
labitat-ansible-fbdea6d790ced4075195cdd663ac420a7dc5857b.zip
space_server: sshd: disable GSSAPIAuthentication
Diffstat (limited to 'roles/space_server/tasks')
-rw-r--r--roles/space_server/tasks/sshd.yml9
1 files changed, 7 insertions, 2 deletions
diff --git a/roles/space_server/tasks/sshd.yml b/roles/space_server/tasks/sshd.yml
index 8eaa8fc..cc8a232 100644
--- a/roles/space_server/tasks/sshd.yml
+++ b/roles/space_server/tasks/sshd.yml
@@ -11,10 +11,15 @@
- name: Configure sshd
lineinfile:
path: '/etc/ssh/sshd_config'
- regexp: '^PasswordAuthentication'
- line: 'PasswordAuthentication no'
+ regexp: '{{ item.regexp }}'
+ line: '{{ item.line }}'
notify:
- restart sshd
+ with_items:
+ - regexp: '^PasswordAuthentication'
+ line: 'PasswordAuthentication no'
+ - regexp: '^#*GSSAPIAuthentication'
+ line: 'GSSAPIAuthentication no'
- name: Enable sshd service
systemd: