#2474: Change osgeo6 to be only key access and read sshpublic key from ldap
---------------------------+--------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2020-I
Component: Systems Admin | Keywords:
---------------------------+--------------------------------------
Now that our ldap supports registering public keys, I'll make the same
change to osgeo6 and then make plans to close off password access.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2474>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.
#2474: Change osgeo6 to be only key access and read sshpublic key from ldap
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2020-I
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+---------------------------------------
Changes (by robe):
* status: new => closed
* resolution: => fixed
Comment:
Looks like this has already been done.
I assume I did it and forgot
Changes done to /etc/ssh/sshd_config
{{{
AuthorizedKeysCommandUser nobody
AuthorizedKeysCommand /usr/sbin/ssh-ldap-publickey
PasswordAuthentication no
}}}
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2474#comment:1>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.