On 2/19/24 18:52, Vince Mulhollon wrote:
[snip]> The configs linked above assume the use of forwarded X11 (a local
> requirement) and permit SSO using Samba-based active directory
> authentication and are intended for internal use only; you could make
> something exposed to the internet somewhat more secure. For example I
> would not put "PermitRootLogin yes" in the sshd of a host out on the
> net.
[snip]

Thanks for the examples and commentary. It is useful for me to see the
actual local customizations based on what is actually out there. I used
to know a place using Kerberos with SSH.

/Lars