]> andersk Git - gssapi-openssh.git/blame - openssh/sshd_config
added my pgp key
[gssapi-openssh.git] / openssh / sshd_config
CommitLineData
e54b3d7c 1# $OpenBSD: sshd_config,v 1.59 2002/09/25 11:17:16 markus Exp $
3c0ef626 2
ff2d7a98 3# This is the sshd server system-wide configuration file. See
4# sshd_config(5) for more information.
3c0ef626 5
e9a17296 6# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
7
8# The strategy used for options in the default sshd_config shipped with
9# OpenSSH is to specify options with their default value where
10# possible, but leave them commented. Uncommented options change a
11# default value.
12
13#Port 22
3c0ef626 14#Protocol 2,1
15#ListenAddress 0.0.0.0
16#ListenAddress ::
17
18# HostKey for protocol version 1
e9a17296 19#HostKey /etc/ssh/ssh_host_key
3c0ef626 20# HostKeys for protocol version 2
e9a17296 21#HostKey /etc/ssh/ssh_host_rsa_key
22#HostKey /etc/ssh/ssh_host_dsa_key
3c0ef626 23
24# Lifetime and size of ephemeral version 1 server key
e9a17296 25#KeyRegenerationInterval 3600
26#ServerKeyBits 768
3c0ef626 27
28# Logging
3c0ef626 29#obsoletes QuietMode and FascistLogging
e9a17296 30#SyslogFacility AUTH
31#LogLevel INFO
3c0ef626 32
33# Authentication:
34
e54b3d7c 35#LoginGraceTime 120
e9a17296 36#PermitRootLogin yes
37#StrictModes yes
3c0ef626 38
e9a17296 39#RSAAuthentication yes
40#PubkeyAuthentication yes
41#AuthorizedKeysFile .ssh/authorized_keys
3c0ef626 42
43# rhosts authentication should not be used
e9a17296 44#RhostsAuthentication no
3c0ef626 45# Don't read the user's ~/.rhosts and ~/.shosts files
e9a17296 46#IgnoreRhosts yes
47# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
48#RhostsRSAAuthentication no
3c0ef626 49# similar for protocol version 2
e9a17296 50#HostbasedAuthentication no
51# Change to yes if you don't trust ~/.ssh/known_hosts for
52# RhostsRSAAuthentication and HostbasedAuthentication
53#IgnoreUserKnownHosts no
3c0ef626 54
55# To disable tunneled clear text passwords, change to no here!
e9a17296 56#PasswordAuthentication yes
57#PermitEmptyPasswords no
3c0ef626 58
e9a17296 59# Change to no to disable s/key passwords
60#ChallengeResponseAuthentication yes
3c0ef626 61
e9a17296 62# Kerberos options
2980ea68 63#KerberosAuthentication no
3c0ef626 64#KerberosOrLocalPasswd yes
e9a17296 65#KerberosTicketCleanup yes
66
2980ea68 67#AFSTokenPassing no
3c0ef626 68
e9a17296 69# Kerberos TGT Passing only works with the AFS kaserver
70#KerberosTgtPassing no
71
88928908 72# Session hooks: if allowed, specify the commands to execute
73#AllowSessionHooks yes
74#SessionHookStartupCmd /bin/true
75#SessionHookShutdownCmd /bin/true
76
e9a17296 77# Set this to 'yes' to enable PAM keyboard-interactive authentication
78# Warning: enabling this may bypass the setting of 'PasswordAuthentication'
e54b3d7c 79#PAMAuthenticationViaKbdInt no
3c0ef626 80
534cf574 81X11Forwarding yes
e9a17296 82#X11DisplayOffset 10
83#X11UseLocalhost yes
84#PrintMotd yes
85#PrintLastLog yes
86#KeepAlive yes
3c0ef626 87#UseLogin no
ff2d7a98 88#UsePrivilegeSeparation yes
e54b3d7c 89#PermitUserEnvironment no
ff2d7a98 90#Compression yes
3c0ef626 91
e9a17296 92#MaxStartups 10
93# no default banner path
94#Banner /some/path
95#VerifyReverseMapping no
3c0ef626 96
e9a17296 97# override default of no subsystems
3c0ef626 98Subsystem sftp /usr/libexec/sftp-server
999a3b38 99
100# where to store the pid of sshd process
d7766c89 101#PidFile /var/run/sshd.pid
This page took 0.085203 seconds and 5 git commands to generate.