Skip to content

Commit 66e7ebf

Browse files
committed
Made MaxAuthTries and MaxSessions configurable
1 parent a739063 commit 66e7ebf

File tree

2 files changed

+4
-2
lines changed

2 files changed

+4
-2
lines changed

attributes/default.rb

+2
Original file line numberDiff line numberDiff line change
@@ -71,3 +71,5 @@
7171
default['ssh']['use_dns'] = nil # sshd
7272
# set this to nil to let us detect the attribute based on the node platform
7373
default['ssh']['use_privilege_separation'] = nil
74+
default['ssh']['max_auth_tries'] = 2 # sshd
75+
default['ssh']['max_sessions'] = 10 # sshd

templates/default/opensshd.conf.erb

+2-2
Original file line numberDiff line numberDiff line change
@@ -89,8 +89,8 @@ UseLogin no
8989
UsePrivilegeSeparation <%= @use_priv_sep %>
9090
PermitUserEnvironment no
9191
LoginGraceTime 30s
92-
MaxAuthTries 2
93-
MaxSessions 10
92+
MaxAuthTries <%= @node['ssh']['max_auth_tries'] %>
93+
MaxSessions <%= @node['ssh']['max_sessions'] %>
9494
MaxStartups 10:30:100
9595

9696
# Enable public key authentication

0 commit comments

Comments
 (0)