Wrap AuthorizedKeysCommand in Match statement

565220f8 · Will Chandler · Stan Hu · 2e08c928 · 565220f8
Commit 565220f8 authored Mar 05, 2020 by Will Chandler Committed by Stan Hu Mar 05, 2020
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 2 deletions

doc/administration/operations/fast_ssh_key_lookup.md doc/administration/operations/fast_ssh_key_lookup.md +4 -2

No files found.
--- a/doc/administration/operations/fast_ssh_key_lookup.md
+++ b/doc/administration/operations/fast_ssh_key_lookup.md
@@ -54,8 +54,10 @@ Add the following to your `sshd_config` file. This is usually located at
 Omnibus Docker:

 ```plaintext
-AuthorizedKeysCommand /opt/gitlab/embedded/service/gitlab-shell/bin/gitlab-shell-authorized-keys-check git %u %k
-AuthorizedKeysCommandUser git
+Match User git    # Apply the AuthorizedKeysCommands to the git user only
+  AuthorizedKeysCommand /opt/gitlab/embedded/service/gitlab-shell/bin/gitlab-shell-authorized-keys-check git %u %k
+  AuthorizedKeysCommandUser git
+Match all    # End match, settings apply to all users again
 ```

 Reload OpenSSH: