Различия

Показаны различия между двумя версиями страницы.

--- it:centos_7_-_vkljuchenie_novoj_mashiny_v_domen_freeipa [2020/04/15 16:28] – puse_vivat
+++ it:centos_7_-_vkljuchenie_novoj_mashiny_v_domen_freeipa [2020/04/15 16:34] – puse_vivat
@@ Строка 3: / Строка 3: @@
 ''yum install ipa-client dnsmasq''
-''cat /etc/dnsmasq.conf
+cat /etc/dnsmasq.conf\\
-bind-interfaces
+''bind-interfaces\\
-cache-size=150
+cache-size=150\\
-conf-dir=/etc/dnsmasq.d,.rpmnew,.rpmsave,.rpmorig
+conf-dir=/etc/dnsmasq.d,.rpmnew,.rpmsave,.rpmorig\\
-interface=lo
+interface=lo\\
 local-ttl=60''
@@ Строка 14: / Строка 14: @@
 ''authconfig --enablemkhomedir --update''
-/etc/ssh/sshd_config:
+/etc/ssh/sshd_config:\\
-''Protocol 2
+''Protocol 2\\
-LogLevel INFO
+LogLevel INFO\\
-X11Forwarding no
+X11Forwarding no\\
-MaxAuthTries 4
+MaxAuthTries 4\\
-IgnoreRhosts yes
+IgnoreRhosts yes\\
-HostbasedAuthentication no
+HostbasedAuthentication no\\
-PermitRootLogin no
+PermitRootLogin no\\
-PermitEmptyPasswords no
+PermitEmptyPasswords no\\
-PermitUserEnvironment no
+PermitUserEnvironment no\\
-Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
+Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com\\
-MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com
+MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256,umac-128@openssh.com\\
-KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
+KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256\\
-ClientAliveInterval 900
+ClientAliveInterval 900\\
-ClientAliveCountMax 0
+ClientAliveCountMax 0\\
-LoginGraceTime 60
+LoginGraceTime 60\\
-Banner /etc/issue.net
+Banner /etc/issue.net\\
-AllowGroups admins deploymanager
+AllowGroups admins deploymanager\\
+\\
-HostKey /etc/ssh/ssh_host_rsa_key
+HostKey /etc/ssh/ssh_host_rsa_key\\
-HostKey /etc/ssh/ssh_host_ecdsa_key
+HostKey /etc/ssh/ssh_host_ecdsa_key\\
-HostKey /etc/ssh/ssh_host_ed25519_key
+HostKey /etc/ssh/ssh_host_ed25519_key\\
-AuthorizedKeysFile .ssh/authorized_keys
+AuthorizedKeysFile .ssh/authorized_keys\\
-AcceptEnv LANG LC_*
+AcceptEnv LANG LC_*\\
-Subsystem sftp /usr/libexec/openssh/sftp-server
+Subsystem sftp /usr/libexec/openssh/sftp-server\\
-#ChallengeResponseAuthentication no
+#ChallengeResponseAuthentication no\\
-PrintMotd no
+PrintMotd no\\
-#UsePAM yes
+#UsePAM yes\\
-#AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
+#AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\\
-#AuthorizedKeysCommandUser nobody
+#AuthorizedKeysCommandUser nobody\\
-KerberosAuthentication no
+KerberosAuthentication no\\
-PubkeyAuthentication yes
+PubkeyAuthentication yes\\
-UsePAM yes
+UsePAM yes\\
-AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys
+AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\\
-GSSAPIAuthentication yes
+GSSAPIAuthentication yes\\
-ChallengeResponseAuthentication yes
+ChallengeResponseAuthentication yes\\
 AuthorizedKeysCommandUser nobody''
 /etc/issue.net - заполнить по вкусу.