start writing main program, finish ssh module, new authnz module, various cleanup

2021-06-14 17:46:59 +02:00
parent e970f24a5c
commit 2f9eb19ebe
7 changed files with 147 additions and 59 deletions
--- a/repo/common/sshd_config
+++ b/repo/common/sshd_config
@@ -0,0 +1,31 @@
+Port                            22
+Protocol                        2
+HostKey                         /etc/ssh/ssh_host_ed25519_key
+SyslogFacility                  AUTH
+LogLevel                        INFO
+LoginGraceTime                  120
+PermitRootLogin                 no
+StrictModes                     yes
+PubkeyAuthentication            yes
+AuthorizedKeysFile              %h/.ssh/authorized_keys
+IgnoreRhosts                    yes
+HostbasedAuthentication         no
+ChallengeResponseAuthentication no
+PasswordAuthentication          yes
+PermitEmptyPasswords            no
+KerberosAuthentication          yes
+KerberosOrLocalPasswd           yes
+KerberosTicketCleanup           yes
+GSSAPIAuthentication            yes
+GSSAPICleanupCredentials        yes
+GSSAPIStrictAcceptorCheck       no
+X11Forwarding                   yes
+X11DisplayOffset                10
+PrintMotd                       no
+PrintLastLog                    yes
+TCPKeepAlive                    yes
+AcceptEnv                       LANG LC_*
+AllowTcpForwarding              no
+Match   Address                 10.3.0.0/16
+        PermitRootLogin         yes
+