Yuvipanda has submitted this change and it was merged. Change subject: tools: make sure UseDNS is set for HBA ......................................................................
tools: make sure UseDNS is set for HBA Bug: T116687 Change-Id: Ifdf15d3b877db89e73a26566402a98f60b19698e --- M modules/ssh/templates/sshd_config.erb 1 file changed, 3 insertions(+), 0 deletions(-) Approvals: Yuvipanda: Looks good to me, approved jenkins-bot: Verified diff --git a/modules/ssh/templates/sshd_config.erb b/modules/ssh/templates/sshd_config.erb index 88b8b52..2c3b45c 100644 --- a/modules/ssh/templates/sshd_config.erb +++ b/modules/ssh/templates/sshd_config.erb @@ -64,6 +64,9 @@ <% if @enable_hba %> HostbasedAuthentication yes HostbasedUsesNameFromPacketOnly no + +# matching entries shosts.equiv requires a reverse DNS lookup +UseDNS yes <% else %> HostbasedAuthentication no <% end %> -- To view, visit https://gerrit.wikimedia.org/r/252258 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: Ifdf15d3b877db89e73a26566402a98f60b19698e Gerrit-PatchSet: 3 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Merlijn van Deen <[email protected]> Gerrit-Reviewer: Yuvipanda <[email protected]> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
