[Freeipa-devel] [PATCHES] 59-65 SSH public key management

Jan Cholasta jcholast at redhat.com
Thu Dec 8 07:42:47 UTC 2011


Dne 7.12.2011 17:28, Jan Cholasta napsal(a):
> [PATCH] 65 Configure ssh and sshd during ipa-client-install.
>
> For ssh, VerifyHostKeyDNS option is enabled.
>
> For sshd, KerberosAuthentication, GSSAPIAuthentication and UsePAM
> options are enabled (this can be disabled using --no-sshd
> ipa-client-install option).
>

Changed this not to implicitly trust DNS, as discussed on yesterday's 
meeting. You can make SSH trust DNS explicitly using --ssh-trust-dns 
ipa-client-install option.

Honza

-- 
Jan Cholasta
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-jcholast-65.1-ssh-install-config-sshd.patch
Type: text/x-patch
Size: 7249 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20111208/1fc3b8f0/attachment.bin>


More information about the Freeipa-devel mailing list