Skip to content
This repository was archived by the owner on Dec 26, 2020. It is now read-only.

fix validation error #113

Merged
merged 1 commit into from
May 18, 2017
Merged

fix validation error #113

merged 1 commit into from
May 18, 2017

Conversation

pwyliu
Copy link
Contributor

@pwyliu pwyliu commented May 15, 2017

In 4.1.0 the UseDNS fragment was added to the sshd template. This causes a validation error when sftp_enabled is true, because it's below Match Group sftponly and sshd interprets this line to be inside the Match block:

...
TASK [dev-sec.ssh-hardening : create sshd_config and set permissions to root/600] ***
fatal: [default]: FAILED! => {"changed": true, "exit_status": 255, "failed": true, "msg": "failed to validate", "stderr": "/home/vagrant/.ansible/tmp/ansible-tmp-1494819613.2-15252609610528/source line 164: Directive 'UseDNS' is not allowed within a Match block\r\n", 
...

This PR moves the UseDNS fragment up into the network section to resolve this.

@rndmh3ro rndmh3ro merged commit 037cec6 into dev-sec:master May 18, 2017
@rndmh3ro
Copy link
Member

Thanks for the fix!

# for free to subscribe to this conversation on GitHub. Already have an account? #.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants