Knowledge Base (Posts about sshd_config)

Fedora sshd_config locale

bgstack15 — Mon, 25 Dec 2023 13:41:13 GMT

Devuan includes this by default, but Fedora does not. There's probably good reasons. I'll take "Upstream doesn't package it that way" as a good reason!

files/2023/12/listings/allow-ssh-locale.sh (Source)

	`#!/bin/sh`
	`# Startdate: 2023-12-14-5 10:17`
	`# Reference:`
	`# https://stackoverflow.com/questions/29609371/how-not-to-pass-the-locale-through-an-ssh-connection-command`
	`# Documentation:`
	`# Not needed for Devuan because this AcceptEnv is already in the default file sshd_config`
	`tf="/etc/ssh/sshd_config.d/30-locale.conf"`
	`test ! -f "${tf}" && touch "${tf}"`
	`grep -qE '^AcceptEnv.LC_\' "${tf}" 1>/dev/null 2>&1 \|\| {`
	`printf "%s\n" 'AcceptEnv LANG LC_*' >> "${tf}"`
	`systemctl reload sshd`
	`}`

Ansible playbook for configuring access like another user

bgstack15 — Thu, 22 Feb 2018 14:17:14 GMT

When you want User B to have the same groups, ssh access, and sssd permissions, use this playbook. It depends on a few files from the bgscripts package for now. Maybe someday I'll make some ansible modules for ssh_allowusers: allowed=yes name="{{ item }}" and sssd_allow_users. You'll need these:

https://gist.github.com/bgstack15/a5a1ac295a2579d54eefe97818ecc1e8

Custom userinfo.sh

bgstack15 — Mon, 08 Jan 2018 14:02:52 GMT

History

I needed to query certain information about a user on a Linux system. Specifically this output:

user: bgstack15
getent: YES
getent_type: sss
can_ssh: YES
can_sss: YES

I wanted to know if a user is defined (getent), and if so, in which database (local or in Active Directory). Also, is the user in the AllowUsers list of the sshd_config, or a member of a group in the AllowGroups list. And then the same question for the sssd config file.

The script

https://gist.github.com/bgstack15/f0696da7d45022df75e81f78146c8080