Bb authorized keys for

[asakapab0i]

Description of the change

Description here

Type of change

• Bug fix
• New feature

Testing

• Testing information has been added - test cases checklist and steps followed for testing.
• Testing screenshot(s) attached for more information.

Security

• This PR has security related considerations.

Test results

Fresh instance with no --allow-authorized-keys-for parameter

--- Old /etc/ssh/sshd_config
+++ New /etc/ssh/sshd_config
@@ -121,3 +121,11 @@
 #      AllowTcpForwarding no
 #      PermitTTY no
 #      ForceCommand cvs server
+
+AuthorizedKeysFile     noner
+
+Match User *
+       AuthorizedKeysFile ./ssh/authorized_keys
+
+AuthorizedKeysCommand          /usr/local/sbin/foxpass_ssh_keys.sh
+AuthorizedKeysCommandUser      root

With --allow-authorized-keys-for parameter e.g --allow-authorized-keys-for ubuntu

--- Old /etc/ssh/sshd_config
+++ New /etc/ssh/sshd_config
@@ -122,9 +122,9 @@
 #      PermitTTY no
 #      ForceCommand cvs server

-AuthorizedKeysFile     noner
+AuthorizedKeysFile    noner

-Match User *
+Match User ubuntu
        AuthorizedKeysFile ./ssh/authorized_keys

With --allow-authorized-keys-for parameter for multiple users e.g --allow-authorized-keys-for ubuntu,test,bryan

--- Old /etc/ssh/sshd_config
+++ New /etc/ssh/sshd_config
@@ -124,7 +124,7 @@

 AuthorizedKeysFile    noner

-Match User ubuntu
+Match User ubuntu,test,bryan
        AuthorizedKeysFile ./ssh/authorized_keys

With existing AuthorizedKeysFile before running the install script with --allow-authorized-keys-for parameter

--- Old /etc/ssh/sshd_config
+++ New /etc/ssh/sshd_config
@@ -122,7 +122,7 @@
 #      PermitTTY no
 #      ForceCommand cvs server

-AuthorizedKeysFile    .ssh/authorized_keys
+AuthorizedKeysFile    noner

With no existing AuthorizedKeysFile running the install script with --allow-authorized-keys-for parameter

--- Old /etc/ssh/sshd_config
+++ New /etc/ssh/sshd_config
@@ -129,3 +129,5 @@
 AuthorizedKeysCommand          /usr/local/sbin/foxpass_ssh_keys.sh
 AuthorizedKeysCommandUser      root

+
+AuthorizedKeysFile     noner

Rerunning the script twice should not create a duplicate line.

Passed