diff options
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/ssh/sshd_config.j2 | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/data/templates/ssh/sshd_config.j2 b/data/templates/ssh/sshd_config.j2 index 7e44efae8..d6e31b0f4 100644 --- a/data/templates/ssh/sshd_config.j2 +++ b/data/templates/ssh/sshd_config.j2 @@ -114,3 +114,9 @@ RekeyLimit {{ rekey.data }}M {{ rekey.time + 'M' if rekey.time is vyos_defined } {% if trusted_user_ca_key is vyos_defined %} TrustedUserCAKeys /etc/ssh/trusted_user_ca_key {% endif %} + +{% if trusted_user_ca_key is vyos_defined and trusted_user_ca_key.bind_user is vyos_defined %} +AuthorizedPrincipalsFile /etc/ssh/authorized_principals/%u +{% elif trusted_user_ca_key is vyos_defined %} +AuthorizedPrincipalsFile none +{% endif %} |