if include does not supported, it is an older sshd-version. unsupported ciphers/kex/macs could be set, so leave defaults.

This commit is contained in:
Denis Knauf 2024-03-24 22:23:27 +01:00
parent 9546f3e3d3
commit 8bccab571e

View file

@ -45,9 +45,9 @@
KerberosAuthentication: '{{sshd_kerberos_authentication}}' KerberosAuthentication: '{{sshd_kerberos_authentication}}'
GSSAPIAuthentication: '{{sshd_gssapi_authentication}}' GSSAPIAuthentication: '{{sshd_gssapi_authentication}}'
TCPKeepAlive: 'yes' TCPKeepAlive: 'yes'
Ciphers: '{{sshd_ciphers}}' #Ciphers: '{{sshd_ciphers}}'
MACs: '{{sshd_macs}}' #MACs: '{{sshd_macs}}'
KexAlgorithms: '{{sshd_kex_algorithms}}' #KexAlgorithms: '{{sshd_kex_algorithms}}'
- name: sshd_config - name: sshd_config
lineinfile: lineinfile:
path: /etc/ssh/sshd_config path: /etc/ssh/sshd_config