Andrew Bogott has uploaded a new change for review.
https://gerrit.wikimedia.org/r/90561
Change subject: Don't allow Password Authentication on production
......................................................................
Don't allow Password Authentication on production
This was added by Matanya in a previous patch, and I don't know why
it's there. Pulling it out pending explanation.
Change-Id: I4c4fe0d4fc9afd0f34f043b3954e3ee037628074
---
M modules/ssh/templates/sshd_config.erb
1 file changed, 0 insertions(+), 5 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/61/90561/1
diff --git a/modules/ssh/templates/sshd_config.erb
b/modules/ssh/templates/sshd_config.erb
index ad4a1c9..76580ab 100644
--- a/modules/ssh/templates/sshd_config.erb
+++ b/modules/ssh/templates/sshd_config.erb
@@ -110,11 +110,6 @@
RhostsRSAAuthentication no
RSAAuthentication no
<% end %>
-<% if @realm == "production" then %>
-# allow connections from the LAN to use passwords.
-Match Address 208.80.152.*,91.198.174.0/24,10.*
- PasswordAuthentication yes
-<% end %>
##
## Anything below this point must start with a match declaration
## or will only apply to the previous Matches above.
--
To view, visit https://gerrit.wikimedia.org/r/90561
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I4c4fe0d4fc9afd0f34f043b3954e3ee037628074
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
