#!/usr/bin/env bash

parameter_sshd_t=usepam
parameter_sshd_config=UsePAM
desired_value=yes

if ! command -v sshd &>/dev/null; then
	echo "sshd command could not be found"
	exit 0
fi

# Check using sshd -T output
actual_value=$(sshd -T | grep -i "$parameter_sshd_t" | awk '{print $2}')

if [ -z "$actual_value" ]; then
	if grep -iq '^$parameter_sshd_config' /etc/ssh/sshd_config; then
		actual_value=$(grep -i '^$parameter_sshd_config' /etc/ssh/sshd_config | awk '{print $2}')
	else

		exit 1
	fi
fi

if [ "$actual_value" = "$desired_value" ]; then
	exit 0
else
	exit 1
fi
