SSH Host-Based Authentication

Enable SSH host-based authentication from specified hosts and configure the SSH client to use it.

Requirements

None.

Role Variables

ssh_hostbased_auth_allowed_hosts: []        # List of IP addresses or hostnames allowed to access the target machine.
ssh_hostbased_auth_only: False              # If true, only host-based authentication will be allowed.
ssh_hostbased_auth_server: True             # Configures the server settings for host-based authentication.
ssh_hostbased_auth_client: True             # Configures the client settings in /etc/ssh/ssh_config.
ssh_hostbased_auth_keyscan_retry: 6         # Number of retries for the ssh-keyscan command.
ssh_hostbased_auth_keyscan_retry_delay: 10  # Delay in seconds between each ssh-keyscan attempt.
ssh_hostbased_auth_permit_root_login: false # Whether root login is allowed or not.

Dependencies

The dnspython package is required.

Example Playbook

- hosts: all
  roles:
    - { role: so5.ssh_hostbased_auth, ssh_hostbased_auth_allowed_hosts: ["192.168.0.2", "192.168.0.4"] }

License

MIT

Author Information

This role was created by Naoyuki Sogo.