openstack/ansible-hardening
Code Issues Proposed changes

[Docs] Add missing docs for GSSAPI

Browse Source 
The tasks for disabling GSSAPI auth were merged long ago, but the
documentation was never written. This patch adds documentation for
those tasks.

Implements: blueprint security-rhel7-stig
Change-Id: If41c5398d31849b4f8de1c8fc4969c1daf596a00
This commit is contained in:
Major Hayden
2016-12-06 16:06:01 -06:00
parent ec03df773e
commit 655b5f929d
1 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
doc/metadata/rhel7/RHEL-07-040660.rst
View File

@@ -1,7 +1,14 @@
--- ---
id: RHEL-07-040660 id: RHEL-07-040660
status: not implemented status: implemented
tag: misc tag: sshd
--- ---
This STIG requirement is not yet implemented. The ``GSSAPIAuthentication`` setting is set to ``no`` to meet the requirements
of the STIG.
Deployers can opt out of this change by setting the following Ansible variable:
.. code-block:: yaml
security_sshd_disallow_gssapi: no