*shouldn't ;) On 6 October 2016 at 17:57, Rafal Skolasinski <r.j.skolasinski at gmail.com> wrote: > Hi Laurențiu, > > Thanks for detailed information! I am using playbooks to create vms on a > remote host and then I want to run another playbook to configure them. > I want to enable password authentication only for a moment of initial > configuration and then disable it again - I believe this should cause any > security risk. > > Thanks, > Rafal > > > > On 6 October 2016 at 17:42, Laurentiu Pancescu <lpancescu at gmail.com> > wrote: > >> Hi Rafal, >> >> On 06/10/16 15:42, Rafal Skolasinski wrote: >> >>> Vagrant Image version 1607.01 introduced a nice fix for a security issue >>> with default password for a Vagrant user. >>> >>> I understand that this is important, however I wanted to ask if it is >>> possible to switch it off? >>> I couldn't figure out a way it was introduced. >>> >> >> If you want to reenable it, set PasswordAuthentication to no in >> /etc/ssh/sshd_config, then reload sshd. I wouldn't recommend that, since >> the system is fully usable with passwords disabled. >> >> I was using first ansible login via password to configure my vms and then >>> switching that option off by myself anyway. >>> >> >> You can still do this without enabling password authentication. If you >> use Vagrant's Ansible provisioner, things will just work without doing >> anything special (this is how I work). [1] >> >> Alternatively, configure Ansible to connect using the private key that >> Vagrant generates (e.g. .vagrant/machines/default/virtualbox/private_key); >> if you'd like to use your own key for all boxes, add 'config.ssh.insert_key >> = false' to your Vagrantfile, and replace the insecure key from your >> playbook. >> >> Another way is to generate a ssh configuration file locally, via 'vagrant >> ssh-config > my_ssh_config', and use Ansible's --ssh-common-args option to >> pass "-F my_ssh_cfg" to ssh. >> >> Best regards, >> Laurențiu >> >> >> [1] https://www.vagrantup.com/docs/provisioning/ansible.html >> _______________________________________________ >> CentOS-devel mailing list >> CentOS-devel at centos.org >> https://lists.centos.org/mailman/listinfo/centos-devel >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20161006/55ba67ff/attachment-0008.html>