From df723248417eb8671aac0119037aa272c525126d Mon Sep 17 00:00:00 2001 From: Olivier Blin Date: Sun, 7 Feb 2016 23:32:57 +0100 Subject: openssh: do not force command for git user The "gitolite " is already set in /var/lib/git/.ssh/authorized_keys, and we do not want to override it. --- modules/openssh/templates/sshd_config | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modules/openssh/templates/sshd_config b/modules/openssh/templates/sshd_config index 1178a3e4..ed8c97ef 100644 --- a/modules/openssh/templates/sshd_config +++ b/modules/openssh/templates/sshd_config @@ -122,6 +122,7 @@ Subsystem sftp <%= path_to_sftp %>/sftp-server # AllowTcpForwarding no # ForceCommand cvs server <% if @hostname == 'duvel' then %> -Match User *,!schedbot,!root +# git command is already forced to "gitolite " in /var/lib/git/.ssh/authorized_keys +Match User *,!schedbot,!root,!git ForceCommand /usr/local/bin/sv_membersh.pl -c "$SSH_ORIGINAL_COMMAND" <% end %> -- cgit v1.2.1