[GH-ISSUE #71] Duplicated MFAPasswordMaxDays entry in bastion.conf #20

New issue

Closed

opened 2026-05-07 00:17:31 +02:00 by BreizhHardware · 4 comments

BreizhHardware commented

2026-05-07 00:17:31 +02:00

Owner

Originally created by @axl89 on GitHub (Nov 28, 2020).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/71

While doing a Chef cookbook to manage this awesome software, I found out that the MFAPasswordMaxDays entry is duplicated in the bastion.conf.dist file in v3.01.00:

# MFAPasswordMaxDays (int >= 0)
#    DESC: For the PAM UNIX password MFA, sets the maximum amount of days after which the password must be changed (see `chage -M')
# DEFAULT: 90
"MFAPasswordMaxDays": 90,
#
# MFAPasswordMaxDays (int >= 0)
#    DESC: For the PAM UNIX password MFA, sets the number of days before expiration on which the user will be warned to change his password (see `chage -W')
# DEFAULT: 15
"MFAPasswordMaxDays": 15,

I'm not sure which one you'd like to keep, so I can't make a PR, but I hope this issue is useful! 😄

Originally created by @axl89 on GitHub (Nov 28, 2020). Original GitHub issue: https://github.com/ovh/the-bastion/issues/71 While doing a [Chef cookbook](https://github.com/axl89/ovh_the_bastion) to manage this **awesome** software, I found out that the `MFAPasswordMaxDays` entry is duplicated in the [bastion.conf.dist file](https://github.com/ovh/the-bastion/blob/v3.01.00/etc/bastion/bastion.conf.dist) in v3.01.00: ``` # MFAPasswordMaxDays (int >= 0) # DESC: For the PAM UNIX password MFA, sets the maximum amount of days after which the password must be changed (see `chage -M') # DEFAULT: 90 "MFAPasswordMaxDays": 90, # # MFAPasswordMaxDays (int >= 0) # DESC: For the PAM UNIX password MFA, sets the number of days before expiration on which the user will be warned to change his password (see `chage -W') # DEFAULT: 15 "MFAPasswordMaxDays": 15, ``` I'm not sure which one you'd like to keep, so I can't make a PR, but I hope this issue is useful! :smile:

BreizhHardware

2026-05-07 00:17:31 +02:00

closed this issue
added the
bug
label

BreizhHardware commented

2026-05-07 00:17:32 +02:00

Author

Owner

@Alkorin commented on GitHub (Nov 28, 2020):

Thanks for the report!

It's not a duplicate entry but a wrong config name.

@Alkorin commented on GitHub (Nov 28, 2020): Thanks for the report! It's not a duplicate entry but a wrong config name.

BreizhHardware commented

2026-05-07 00:17:33 +02:00

Author

Owner

@speed47 commented on GitHub (Nov 30, 2020):

Side note @axl89, we have a Puppet module out since a few days, because that's what we happen to be using internally ;)
So that's cool you're working on a Chef cookbook!

@speed47 commented on GitHub (Nov 30, 2020): Side note @axl89, we have a Puppet module out since a few days, because that's what we happen to be using internally ;) So that's cool you're working on a Chef cookbook!

BreizhHardware commented

2026-05-07 00:17:33 +02:00

Author

Owner

@axl89 commented on GitHub (Dec 1, 2020):

Thanks, @speed47 ! I'll follow your work closely, I really like this project and we will start using it very soon in our production environments. I aim to maintain the cookbook up to date with your new changes and configurations! 😄

@axl89 commented on GitHub (Dec 1, 2020): Thanks, @speed47 ! I'll follow your work closely, I really like this project and we will start using it very soon in our production environments. I aim to maintain the cookbook up to date with your new changes and configurations! :smile:

BreizhHardware commented

2026-05-07 00:17:33 +02:00

Author

Owner

@speed47 commented on GitHub (Dec 15, 2020):

I'll try your cookbook when I find some time. We might want to reference it in the readme as a third party tool at some point!

@speed47 commented on GitHub (Dec 15, 2020): I'll try your cookbook when I find some time. We might want to reference it in the readme as a third party tool at some point!