ssh-server: allow disabling ssh password auth

ssh-server/defaults/main.yml

@@ -4,6 +4,7 @@
 ssh_authorized_keys: "{{ inventory_dir }}/files/keys"
 ssh_mkhomedir: yes
 ssh_strong_crypto: yes
+ssh_password_auth: yes
 ssh_gssapi: yes
 ssh_sftp_options: ""
 ssh_allow_groups: []

ssh-server/templates/sshd_config.j2

@@ -52,7 +52,7 @@ PermitEmptyPasswords no
 ChallengeResponseAuthentication no
 
 # Change to no to disable tunnelled clear text passwords
-#PasswordAuthentication yes
+PasswordAuthentication {{ 'yes' if ssh_password_auth else 'no' }}
 
 # Kerberos options
 #KerberosAuthentication no

ssh-server/templates/sshd_config_stretch.j2

@@ -44,7 +44,7 @@ PermitEmptyPasswords no
 ChallengeResponseAuthentication no
 
 # Change to no to disable tunnelled clear text passwords
-#PasswordAuthentication yes
+PasswordAuthentication {{ 'yes' if ssh_password_auth else 'no' }}
 
 # Kerberos options
 #KerberosAuthentication no