add '/etc/security/limits.conf', modify '/etc/ssh/sshd_config'.

2020-02-29 20:52:26 +01:00
parent bbcd57cd5b
commit 2cdbca8cc3
4 changed files with 87 additions and 2 deletions
--- a/roles/common/templates/etc/ssh/sshd_config.j2
+++ b/roles/common/templates/etc/ssh/sshd_config.j2
@ -186,7 +186,7 @@ AllowUsers {{ fact_sshd_allowed_users }}
 # If you just want the PAM account and session checks to run without
 # PAM authentication, then enable this but set PasswordAuthentication
 # and ChallengeResponseAuthentication to 'no'.
-UsePAM yes
+UsePAM {{ sshd_use_pam }}

 # Specifies whether login(1) is used for interactive login sessions.
 # Note that login(1) is never used for remote command execution.