default => $source,
}
- $real_allowed_users = $sshd_allowed_users ? {
+ $real_sshd_allowed_users = $sshd_allowed_users ? {
'' => 'root',
default => $sshd_allowed_users,
}
# override default of no subsystems
Subsystem sftp /usr/libexec/openssh/sftp-server
-AllowUsers <%= allowed_users %>
+AllowUsers <%= real_sshd_allowed_users %>
ChallengeResponseAuthentication no
-AllowUsers <%= allowed_users %>
+AllowUsers <%= real_sshd_allowed_users %>
# AllowTcpForwarding no
# ForceCommand cvs server
-AllowUsers <%= allowed_users %>
+AllowUsers <%= real_sshd_allowed_users %>
# override default of no subsystems
Subsystem sftp /usr/libexec/sftp-server
-AllowUsers <%= allowed_users %>
+AllowUsers <%= real_sshd_allowed_users %>
# Example of overriding settings on a per-user basis
#Match User anoncvs