Commit cea237ff authored by Kevin Lyda's avatar Kevin Lyda
Browse files

Some install cleanup

parent 2d07576b
Loading
Loading
Loading
Loading
+1 −2
Original line number Diff line number Diff line
@@ -70,7 +70,6 @@ Match User bulletin
    AllowTcpForwarding no
    PermitTunnel no
    AuthorizedKeysFile none
    ForceCommand /usr/sbin/nologin
    AuthorizedKeysCommand /usr/local/bin/bulletin authorized-keys %u %t %k
    AuthorizedKeysCommandUser bulletin
```
@@ -81,7 +80,7 @@ path to the binary as needed.
Then reload sshd:

```
sudo systemctl reload sshd
sudo systemctl restart ssh.service
```

With this configuration, sshd delegates key lookup to BULLETIN.  When a
+2 −3
Original line number Diff line number Diff line
@@ -208,7 +208,7 @@ the first user.`)

		// Print sshd config block.
		fmt.Printf(`
--- Add the following to /etc/ssh/sshd_config ---
--- Add the following to /etc/ssh/sshd_config.d/50-bulletin.conf ---

Match User %s
    PasswordAuthentication no
@@ -218,11 +218,10 @@ Match User %s
    AllowTcpForwarding no
    PermitTunnel no
    AuthorizedKeysFile none
    ForceCommand /usr/sbin/nologin
    AuthorizedKeysCommand %s authorized-keys %%u %%t %%k
    AuthorizedKeysCommandUser %s

--- Then run: sudo systemctl reload sshd ---
--- Then run: sudo systemctl restart ssh.service ---

`, os.Getenv("USER"), bulletin, os.Getenv("USER"))
		_, _ = ask.GetLine("Press Enter to continue after configuring sshd...")