Additional options for supporting duo 2FA solution
https://duo.com/docs/duounix
Change-Id: I0a4284fc148fc31c5e03f45e090726567688c3f4
diff --git a/README.rst b/README.rst
index 8254184..c2d3a3b 100644
--- a/README.rst
+++ b/README.rst
@@ -154,6 +154,37 @@
server:
dss_enabled: true
+* The OpenSSH server configuration with the duo 2FA
+https://duo.com/docs/duounix
+with Match User 2FA can be bypassed for some accounts
+
+ .. code-block:: yaml
+
+ openssh:
+ server:
+ use_dns: false
+ password_auth: false
+ challenge_response_auth: true
+ ciphers:
+ aes256-ctr:
+ enabled: true
+ aes192-ctr:
+ enabled: true
+ aes128-ctr:
+ enabled: true
+ authentication_methods:
+ publickey:
+ enabled: true
+ keyboard-interactive:
+ enabled: true
+ match_user:
+ jenkins:
+ authentication_methods:
+ publickey:
+ enabled: true
+
+
+
* OpenSSH server configuration supports AllowUsers, DenyUsers, AllowGroup,
DenyGroups via allow_users, deny_users, allow_groups, deny_groups keys respectively.