From 8baab7516e10541732df6e14bd9fa38dd06ec8b0 Mon Sep 17 00:00:00 2001 From: Maxim Burgerhout Date: Fri, 12 Feb 2021 13:05:15 +0100 Subject: [PATCH] Extend GSSAPI configuration support to ssh_config Previously, the ssh_gssapi_support variable only toggled the GSSAPI settings in sshd_config. Through this change, setting ssh_gssapi_support to true also enables support in ssh_config. It enables both authentication and credential delegation. Signed-off-by: Maxim Burgerhout --- roles/ssh_hardening/templates/openssh.conf.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/ssh_hardening/templates/openssh.conf.j2 b/roles/ssh_hardening/templates/openssh.conf.j2 index afe589ee..a6e1a0f4 100644 --- a/roles/ssh_hardening/templates/openssh.conf.j2 +++ b/roles/ssh_hardening/templates/openssh.conf.j2 @@ -104,8 +104,8 @@ RSAAuthentication yes PasswordAuthentication {{ 'yes' if ssh_client_password_login else 'no' }} # Only use GSSAPIAuthentication if implemented on the network. -GSSAPIAuthentication no -GSSAPIDelegateCredentials no +GSSAPIAuthentication {{ 'yes' if ssh_gssapi_support else 'no' }} +GSSAPIDelegateCredentials {{ 'yes' if ssh_gssapi_support else 'no' }} # Disable tunneling Tunnel no