fix(googleauth): make sure sshd allows KbdInteractiveAuthentication

saltstack-formulas · Jun 14, 2022 · 3fe8750 · 3fe8750
1 parent be3dd4f
commit 3fe8750
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/users/googleauth.sls b/users/googleauth.sls
@@ -73,4 +73,15 @@ users_googleauth_selinux_applied:
     - name: {{ users.googleauth_dir }}
 {%-   endif %}
 
+sshd:
+  service.running:
+    - watch:
+      - file: /etc/ssh/sshd_config
+
+sshd_config:
+  file.replace:
+    - name: /etc/ssh/sshd_config
+    - pattern: '^(ChallengeResponseAuthentication|KbdInteractiveAuthentication).*'
+    - repl: '\1 yes'
+
 {%- endif %}