Merge pull request #831 from bshephar/sshd-motd

Use PAM for sshd Motd
openstack-k8s-operators · Dec 3, 2024 · 1c2675c · 1c2675c
2 parents bee8d8c + e032cf2
commit 1c2675c
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/roles/edpm_sshd/tasks/configure.yml b/roles/edpm_sshd/tasks/configure.yml
@@ -74,11 +74,16 @@
          {% if edpm_sshd_banner_enabled %}
          {% set _ = edpm_sshd_server_options.__setitem__('Banner', '/etc/issue') %}
          {% endif %}
-         {% if edpm_sshd_motd_enabled %}
-         {% set _ = edpm_sshd_server_options.__setitem__('PrintMotd', 'yes') %}
-         {% endif %}
          {{ edpm_sshd_server_options }}
 
+    - name: Set sshd motd when enabled
+      ansible.builtin.lineinfile:
+        path: /etc/pam.d/sshd
+        regexp: "^session.*optional.*pam_motd.so"
+        line: "session    optional     pam_motd.so motd=/etc/motd"
+        state: present
+      when: edpm_sshd_motd_enabled
+
     - name: Adjust ssh server configuration
       become: true
       ansible.builtin.template: