mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Set the "KerberosAuthentication" option in sshd_config to "no" instead of "yes".
Setting it to "yes" causes sshd to handle kinits itself, bypassing SSSD. ticket 2689
This commit is contained in:
parent
caf36e1f24
commit
6569f355b6
@ -878,7 +878,7 @@ def configure_ssh(fstore, ssh_dir, options):
|
||||
fstore.backup_file(sshd_config)
|
||||
|
||||
changes = {
|
||||
'KerberosAuthentication': 'yes',
|
||||
'KerberosAuthentication': 'no',
|
||||
'GSSAPIAuthentication': 'yes',
|
||||
'UsePAM': 'yes',
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user