%post
# paren for redirect of ouput to logfile...
(

echo "post script ssh keys running `date`"

# Tom's ssh key for root access
mkdir /root/.ssh
chmod 700 /root/.ssh
touch /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys

cat >> /root/.ssh/authorized_keys <<ENDSSHKEY
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApn2AFiC3Oi30VaeZ7o8h\
I6fV7oWpUp9Hq8sWABHRftohXufJ+KdjlH1Xv+iwfXlk8iiM8SRtuJol\
RtaOyMEuwMZKz8+AzS0VXceBUd/EAcUCAKHsLO4VRwJpUfMNan6jj1OD\
V4hx5zL9ZecR/C2VpOoYSusFQ1emBdvOO4lE2TAM1gicrjMgHWfo5fu6\
PsFb/ShXu4N52mzTO0LYa0pDUePsZfucEo2M0rDywtAOxENQ/bZ9E7Tc\
jp2Hzuh5rE145TeN/J2wh3Bw09d+FernumAtwayD3VRoLZudlU9Z/+h+\
6dgZ6Y9XHumjvUIvU8JTFDay5eqtPM5ueIUI7xO/hw== rockwell ke\
y for aglt2 admin. jul-3-2008"
ENDSSHKEY

# SSHD Config, defaults have been stripped out
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.install.orig
cat > /etc/ssh/sshd_config <<ENDSSHCONFIG
SyslogFacility AUTHPRIV
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
X11Forwarding yes
PermitRootLogin without-password
Subsystem sftp /usr/libexec/openssh/sftp-server
ENDSSHCONFIG

# paren for redirect of ouput to logfile...
) 2>&1 | tee /root/anaconda_post-ssh-keys.log
%end