openstack/tripleo-heat-templates
Code Issues Proposed changes

Disable GSSAPIAuthentication by default

Browse Source 
Having GSSAPIAuthentication enabled by default
can cause issues during the deployment process
if the user is unable to authenticate with kerberos.

This change moves the default for GSSAPIAuthentication
to no instead of yes.

Resolves: rhbz#2059855
Change-Id: Ic579380c9c72917daa01493c259bc969b7291fe9
This commit is contained in:
Brendan Shephard 2022-03-04 01:56:30 +11:00
parent e93d59464e
commit fa69bfc1eb
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
deployment/sshd/sshd-baremetal-ansible.yaml
View File

@ -44,7 +44,7 @@ parameters:
SyslogFacility: 'AUTHPRIV'
AuthorizedKeysFile: '.ssh/authorized_keys'
ChallengeResponseAuthentication: 'no'
GSSAPIAuthentication: 'yes'
GSSAPIAuthentication: 'no'
GSSAPICleanupCredentials: 'no'
UsePAM: 'yes'
UseDNS: 'no'

2
deployment/sshd/sshd-baremetal-puppet.yaml
View File

@ -44,7 +44,7 @@ parameters:
SyslogFacility: 'AUTHPRIV'
AuthorizedKeysFile: '.ssh/authorized_keys'
ChallengeResponseAuthentication: 'no'
GSSAPIAuthentication: 'yes'
GSSAPIAuthentication: 'no'
GSSAPICleanupCredentials: 'no'
UsePAM: 'yes'
UseDNS: 'no'