alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity

roles/common: Increase ssh MaxAuthTries from 3 to 4 

If a user has RSA, ECDSA, and ED25519 private keys present on their
system then the ssh client will offer all of these to the server
and they may not get a chance to try password auth before it fails.
This commit is contained in:
Alan Orth 2019-09-15 15:17:00 +03:00
parent cf16264f53
commit 2740f050fc
Signed by: alanorth
GPG Key ID: 0FB860CC9C45B1B9
4 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/common/templates/sshd_config_Debian-10.j2
View File

@ -31,7 +31,7 @@ LogLevel VERBOSE
#LoginGraceTime 2m
PermitRootLogin prohibit-password
#StrictModes yes
MaxAuthTries 3
MaxAuthTries 4
#MaxSessions 10
#PubkeyAuthentication yes

2
roles/common/templates/sshd_config_Debian-9.j2
View File

@ -32,7 +32,7 @@ LogLevel VERBOSE
#LoginGraceTime 2m
PermitRootLogin prohibit-password
#StrictModes yes
MaxAuthTries 3
MaxAuthTries 4
#MaxSessions 10
# Password based logins are disabled - only public key based logins are allowed.
AuthenticationMethods publickey

2
roles/common/templates/sshd_config_Ubuntu-16.04.j2
View File

@ -70,7 +70,7 @@ PrintLastLog yes
TCPKeepAlive yes
#UseLogin no
MaxAuthTries 3
MaxAuthTries 4
#MaxStartups 10:30:60
#Banner /etc/issue.net

2
roles/common/templates/sshd_config_Ubuntu-18.04.j2
View File

@ -31,7 +31,7 @@ LogLevel VERBOSE
#LoginGraceTime 2m
PermitRootLogin prohibit-password
#StrictModes yes
MaxAuthTries 3
MaxAuthTries 4
#MaxSessions 10
#PubkeyAuthentication yes