Opened 5 years ago

Closed 4 years ago

#2474 closed task (fixed)

Change osgeo6 to be only key access and read sshpublic key from ldap

Reported by: robe Owned by: sac@…
Priority: normal Milestone: Sysadmin Contract 2020-I
Component: SysAdmin Keywords:
Cc:

Description

Now that our ldap supports registering public keys, I'll make the same change to osgeo6 and then make plans to close off password access.

Change History (1)

comment:1 by robe, 4 years ago

Resolution: → fixed
Status: new → closed

Looks like this has already been done. I assume I did it and forgot

Changes done to /etc/ssh/sshd_config 

AuthorizedKeysCommandUser nobody
AuthorizedKeysCommand /usr/sbin/ssh-ldap-publickey
PasswordAuthentication no
Note: See TracTickets for help on using tickets.