351964199a
* Prevent printing in noninteractive mode * Allow PAM modules to be configurated directly in pam.d * Configuration should be redable by everybody * Add a way to read ip address in when no IP is awailable * Enable read ip from pam * Fix veritas BUG
32 lines
846 B
Bash
32 lines
846 B
Bash
#!/bin/bash
|
|
|
|
SSHD_CONF=/etc/ssh/sshd_config
|
|
SSHD_PAM_CONF=/etc/pam.d/sshd
|
|
RUBLON_CONFIG=/etc/rublon.config
|
|
RUBLON_SSH_CONFIG=/etc/ssh/sshd_config.d/01-rublon-ssh.conf
|
|
|
|
if [ ! -f $RUBLON_CONFIG ]
|
|
then
|
|
cp -a /usr/share/rublon/rublon.config.defaults $RUBLON_CONFIG
|
|
chown root:root $RUBLON_CONFIG
|
|
chmod 644 $RUBLON_CONFIG
|
|
fi
|
|
|
|
if [ ! -f $RUBLON_SSH_CONFIG ]
|
|
then
|
|
cp -a /usr/share/rublon/01-rublon-ssh.conf.default $RUBLON_SSH_CONFIG
|
|
chown root:root $RUBLON_SSH_CONFIG
|
|
chmod 644 $RUBLON_SSH_CONFIG
|
|
fi
|
|
|
|
if [ -f /etc/os-release ]
|
|
then
|
|
. /etc/os-release
|
|
fi
|
|
|
|
grep -qe 'auth required pam_rublon.so' $SSHD_PAM_CONF || sed -i '$aauth required pam_rublon.so' $SSHD_PAM_CONF
|
|
grep -qe 'account required pam_rublon.so' $SSHD_PAM_CONF || sed -i '$aaccount required pam_rublon.so' $SSHD_PAM_CONF
|
|
|
|
deb-systemd-invoke restart ssh.service
|
|
|