ansible-sshd/vars/RedHat_6.yml

---
__sshd_packages:
  - openssh
  - openssh-server
__sshd_sftp_server: /usr/libexec/openssh/sftp-server
__sshd_defaults:
  HostKey:
    - /etc/ssh/ssh_host_rsa_key
  Protocol: 2
  SyslogFacility: AUTHPRIV
  PasswordAuthentication: true
  ChallengeResponseAuthentication: false
  GSSAPIAuthentication: true
  GSSAPICleanupCredentials: true
  UsePAM: true
  AcceptEnv:
    - LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
    - LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
    - LC_IDENTIFICATION LC_ALL LANGUAGE
    - XMODIFIERS
  X11Forwarding: true
  Subsystem: "sftp {{ __sshd_sftp_server }}"
__sshd_os_supported: true
__sshd_sysconfig_supports_use_strong_rng: true
__sshd_compat_match_all: Match address *
Add EL6 defaults 2014-12-22 11:05:09 +01:00			`---`
Fixes un-overrideable public api variables 2022-08-17 13:53:56 +02:00			`__sshd_packages:`
Add openssh base pkg 2014-12-22 19:50:10 +01:00			`- openssh`
Add EL6 defaults 2014-12-22 11:05:09 +01:00			`- openssh-server`
Fixes un-overrideable public api variables 2022-08-17 13:53:56 +02:00			`__sshd_sftp_server: /usr/libexec/openssh/sftp-server`
Renames variables for all supported platforms 2018-09-03 00:23:58 +02:00			`__sshd_defaults:`
Use only RSA hostkeys in RHEL6 2020-12-08 13:40:02 +01:00			`HostKey:`
			`- /etc/ssh/ssh_host_rsa_key`
Add EL6 defaults 2014-12-22 11:05:09 +01:00			`Protocol: 2`
			`SyslogFacility: AUTHPRIV`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`PasswordAuthentication: true`
			`ChallengeResponseAuthentication: false`
			`GSSAPIAuthentication: true`
			`GSSAPICleanupCredentials: true`
			`UsePAM: true`
Add EL6 defaults 2014-12-22 11:05:09 +01:00			`AcceptEnv:`
fix type in AcceptEnv default AcceptEnv in RedHat includes LC_CTYPE but not LC_TYPE 2015-06-25 17:49:20 +02:00			`- LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES`
Add EL6 defaults 2014-12-22 11:05:09 +01:00			`- LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT`
			`- LC_IDENTIFICATION LC_ALL LANGUAGE`
			`- XMODIFIERS`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`X11Forwarding: true`
Fixes un-overrideable public api variables 2022-08-17 13:53:56 +02:00			`Subsystem: "sftp {{ __sshd_sftp_server }}"`
ansible-lint - align with current Ansible recommendations Use `true/false` instead of `yes/no` Ensure use of FQCN for builtin modules Use correct spacing in Jinja expressions All tasks and plays must have a `name`, and the `name` string must begin with an uppercase letter Use `ansible.posix.mount` instead of `ansible.builtin.mount` Use `set -o pipefail` with `shell` module where supported by the platform shell Signed-off-by: Rich Megginson <rmeggins@redhat.com> 2023-04-10 22:19:29 +02:00			`__sshd_os_supported: true`
Add support for sysconfig on Fedora/RHEL This is useful for opting out from system-wide cryto policy for SSH or configuring advanced use case (strong RNG seed). Fixes: #141 2020-10-06 21:11:35 +02:00			`__sshd_sysconfig_supports_use_strong_rng: true`
Workaround namespace feature also for RHEL6 The OpenSSH 5.3 in RHEL6 is so old it does not support "Match all" so we need some creative workaround for this old stuff. 2021-08-06 20:52:42 +02:00			`__sshd_compat_match_all: Match address *`