Allow login grace time to be configurable

Author: artem-sidorenko

attributes/default.rb

@@ -78,6 +78,7 @@
 default['ssh']['use_dns']                 = nil     # sshd
 # set this to nil to let us detect the attribute based on the node platform
 default['ssh']['use_privilege_separation'] = nil
+default['ssh']['login_grace_time']         = '30s'  # sshd
 default['ssh']['max_auth_tries']           = 2      # sshd
 default['ssh']['max_sessions']             = 10     # sshd
 default['ssh']['client']['password_authentication'] = false   # ssh

templates/default/opensshd.conf.erb

@@ -88,7 +88,7 @@ KexAlgorithms <%= @kex %>
 UseLogin no
 UsePrivilegeSeparation <%= @use_priv_sep %>
 PermitUserEnvironment no
-LoginGraceTime 30s
+LoginGraceTime <%= @node['ssh']['login_grace_time'] %>
 MaxAuthTries <%= @node['ssh']['max_auth_tries'] %>
 MaxSessions <%= @node['ssh']['max_sessions'] %>
 MaxStartups 10:30:100