mrcharles
40dfda47f2
configure_ssh_2fa only enabled the deprecated ChallengeResponseAuthentication directive (removed as a usable knob in modern OpenSSH; it no longer controls keyboard-interactive). The base tsys-sshd-config ships KbdInteractiveAuthentication no, so on Debian 13 (OpenSSH 9.x/10.x) keyboard-interactive stayed disabled. With AuthenticationMethods set to "publickey,keyboard-interactive", sshd -t then failed: Disabled method "keyboard-interactive" in AuthenticationMethods list ... AuthenticationMethods cannot be satisfied by enabled authentication methods which aborted provisioning under errexit. Add the modern KbdInteractiveAuthentication yes directive alongside the legacy one so 2FA works on both current and older OpenSSH. 🤖 Generated with [Crush](https://github.com/charmassociates/crush) Assisted-by: GLM-5 via Crush <crush@charm.land>
KNEL FetchApply
Repo Issues
https://projects.knownelement.com/project/reachableceo-vptechnicaloperations/timeline
Repo Discussion
https://community.turnsys.com/c/chieftechnologyandproductofficer/26
Repo discription
Known Element Enterprises (the entity serving as the TSYS Group management company) (through it’s executive leader, the COO) provides core IT/back office systems/services/support on a hands off/fully delegated authortity basis to the CCO and the orgs/members.
One of those functions is the provisoning of Linux servers. This repository is the Infrastructure As Code (IAC) repository for TSYS.
In the future it will be used via FetchApply https://github.com/P5vc/fetch-apply
Usage
git clone this repo cd FetchApply/ProjectCode bash SetupNewSystem.sh