IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Set the "KerberosAuthentication" option in sshd_config to "no" instead of "yes".

Browse Source 
Setting it to "yes" causes sshd to handle kinits itself, bypassing SSSD.

ticket 2689
This commit is contained in:
Jan Cholasta 2012-04-30 11:58:55 -04:00 committed by Rob Crittenden
parent caf36e1f24
commit 6569f355b6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ipa-client/ipa-install/ipa-client-install
View File

@ -878,7 +878,7 @@ def configure_ssh(fstore, ssh_dir, options):
fstore.backup_file(sshd_config) fstore.backup_file(sshd_config)
changes = { changes = {
'KerberosAuthentication': 'yes', 'KerberosAuthentication': 'no',
'GSSAPIAuthentication': 'yes', 'GSSAPIAuthentication': 'yes',
'UsePAM': 'yes', 'UsePAM': 'yes',
} }