do not set UsePAM on OpenBSD

Upstream opensshd does not support PAM
This commit is contained in:
Eric Cook 2017-01-14 18:38:37 -05:00
parent 086937b84f
commit 686fc2c4ee
1 changed files with 2 additions and 0 deletions

View File

@ -134,6 +134,7 @@
{{ option_default_uncommented('Subsystem', 'sftp /usr/lib/openssh/sftp-server') }}
{% if not salt['grains.get']('os') == 'OpenBSD' -%}
# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
@ -144,6 +145,7 @@
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
{{ option_default_uncommented('UsePAM', 'yes') }}
{%- endif %}
# DNS resolve and map remote IP addresses
{{ option('UseDNS', 'yes') }}