diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2012-04-30 11:58:55 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-04-29 19:45:13 -0400 |
| commit | 6569f355b61d4c0d55ca9ee2c5f36787cce73593 (patch) | |
| tree | b348804fd1dcb4232c41b90513d04f55b25ae3ed /ipa-client | |
| parent | caf36e1f241580c434c3b0bb524f7de00906379d (diff) | |
| download | freeipa-6569f355b61d4c0d55ca9ee2c5f36787cce73593.tar.gz freeipa-6569f355b61d4c0d55ca9ee2c5f36787cce73593.tar.xz freeipa-6569f355b61d4c0d55ca9ee2c5f36787cce73593.zip | |
Set the "KerberosAuthentication" option in sshd_config to "no" instead of "yes".
Setting it to "yes" causes sshd to handle kinits itself, bypassing SSSD.
ticket 2689
Diffstat (limited to 'ipa-client')
| -rwxr-xr-x | ipa-client/ipa-install/ipa-client-install | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 563e9c4df..7133cce04 100755 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -878,7 +878,7 @@ def configure_ssh(fstore, ssh_dir, options): fstore.backup_file(sshd_config) changes = { - 'KerberosAuthentication': 'yes', + 'KerberosAuthentication': 'no', 'GSSAPIAuthentication': 'yes', 'UsePAM': 'yes', } |