diff --git a/defaults/main.yml b/defaults/main.yml index a6efbb8..adbdd3f 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -6,6 +6,8 @@ sshd_permit_root_login: 'prohibit-password' sshd_ciphers: 'chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr' sshd_macs: 'hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com' sshd_kex_algorithms: 'sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256' +sshd_kerberos_authentication: 'no' +sshd_gssapi_authentication: 'no' sshd_host_keys: - '/etc/ssh/ssh_host_ed25519_key' sshd_pubkey_authentication: 'yes'