Skip to content
This repository has been archived by the owner on Dec 26, 2020. It is now read-only.

fix validation error #113

Merged
merged 1 commit into from
May 18, 2017
Merged

fix validation error #113

merged 1 commit into from
May 18, 2017

Conversation

pwyliu
Copy link
Contributor

@pwyliu pwyliu commented May 15, 2017

In 4.1.0 the UseDNS fragment was added to the sshd template. This causes a validation error when sftp_enabled is true, because it's below Match Group sftponly and sshd interprets this line to be inside the Match block:

...
TASK [dev-sec.ssh-hardening : create sshd_config and set permissions to root/600] ***
fatal: [default]: FAILED! => {"changed": true, "exit_status": 255, "failed": true, "msg": "failed to validate", "stderr": "/home/vagrant/.ansible/tmp/ansible-tmp-1494819613.2-15252609610528/source line 164: Directive 'UseDNS' is not allowed within a Match block\r\n", 
...

This PR moves the UseDNS fragment up into the network section to resolve this.

@rndmh3ro rndmh3ro merged commit 037cec6 into dev-sec:master May 18, 2017
@rndmh3ro
Copy link
Member

Thanks for the fix!

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants