From 0abe97831a0dc61f70eecaa10451bbc4bc17fd1c Mon Sep 17 00:00:00 2001
From: "Daniel A. Maierhofer" <git@damadmai.at>
Date: Sat, 3 Nov 2018 14:56:17 +0100
Subject: [PATCH] Set SSH prohibit-password for root, but allow users

---
 group_vars/all | 3 ++-
 roles/common   | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/group_vars/all b/group_vars/all
index 4064fb2..26caefc 100644
--- a/group_vars/all
+++ b/group_vars/all
@@ -17,7 +17,8 @@ common_aliases:
 common_hostname: True
 
 common_rsyslog: True
-common_openssh_permit_root_login: "yes"
+common_openssh_permit_root_login: "prohibit-password"
+common_openssh_password_authentication: "yes"
 
 common_ntp_servers:
   - tutimea.tuwien.ac.at
diff --git a/roles/common b/roles/common
index 5e27af2..a3ab58b 160000
--- a/roles/common
+++ b/roles/common
@@ -1 +1 @@
-Subproject commit 5e27af2b21af707053caaa9c2d434303aa1a78ef
+Subproject commit a3ab58bc633b6ea8dd736e6985d243e8e45f4420