From fbdea6d790ced4075195cdd663ac420a7dc5857b Mon Sep 17 00:00:00 2001 From: Emil Renner Berthing Date: Mon, 20 Nov 2017 20:53:39 +0100 Subject: space_server: sshd: disable GSSAPIAuthentication --- roles/space_server/tasks/sshd.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'roles/space_server/tasks') diff --git a/roles/space_server/tasks/sshd.yml b/roles/space_server/tasks/sshd.yml index 8eaa8fc..cc8a232 100644 --- a/roles/space_server/tasks/sshd.yml +++ b/roles/space_server/tasks/sshd.yml @@ -11,10 +11,15 @@ - name: Configure sshd lineinfile: path: '/etc/ssh/sshd_config' - regexp: '^PasswordAuthentication' - line: 'PasswordAuthentication no' + regexp: '{{ item.regexp }}' + line: '{{ item.line }}' notify: - restart sshd + with_items: + - regexp: '^PasswordAuthentication' + line: 'PasswordAuthentication no' + - regexp: '^#*GSSAPIAuthentication' + line: 'GSSAPIAuthentication no' - name: Enable sshd service systemd: -- cgit v1.2.1