]> andersk Git - gssapi-openssh.git/blame - openssh/sshd_config
removed in openssh-3.1p1 release
[gssapi-openssh.git] / openssh / sshd_config
CommitLineData
e9a17296 1# $OpenBSD: sshd_config,v 1.48 2002/02/19 02:50:59 deraadt Exp $
3c0ef626 2
3# This is the sshd server system-wide configuration file. See sshd(8)
4# for more information.
5
e9a17296 6# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
7
8# The strategy used for options in the default sshd_config shipped with
9# OpenSSH is to specify options with their default value where
10# possible, but leave them commented. Uncommented options change a
11# default value.
12
13#Port 22
3c0ef626 14#Protocol 2,1
15#ListenAddress 0.0.0.0
16#ListenAddress ::
17
18# HostKey for protocol version 1
e9a17296 19#HostKey /etc/ssh/ssh_host_key
3c0ef626 20# HostKeys for protocol version 2
e9a17296 21#HostKey /etc/ssh/ssh_host_rsa_key
22#HostKey /etc/ssh/ssh_host_dsa_key
3c0ef626 23
24# Lifetime and size of ephemeral version 1 server key
e9a17296 25#KeyRegenerationInterval 3600
26#ServerKeyBits 768
3c0ef626 27
28# Logging
3c0ef626 29#obsoletes QuietMode and FascistLogging
e9a17296 30#SyslogFacility AUTH
31#LogLevel INFO
3c0ef626 32
33# Authentication:
34
e9a17296 35#LoginGraceTime 600
36#PermitRootLogin yes
37#StrictModes yes
3c0ef626 38
e9a17296 39#RSAAuthentication yes
40#PubkeyAuthentication yes
41#AuthorizedKeysFile .ssh/authorized_keys
3c0ef626 42
43# rhosts authentication should not be used
e9a17296 44#RhostsAuthentication no
3c0ef626 45# Don't read the user's ~/.rhosts and ~/.shosts files
e9a17296 46#IgnoreRhosts yes
47# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
48#RhostsRSAAuthentication no
3c0ef626 49# similar for protocol version 2
e9a17296 50#HostbasedAuthentication no
51# Change to yes if you don't trust ~/.ssh/known_hosts for
52# RhostsRSAAuthentication and HostbasedAuthentication
53#IgnoreUserKnownHosts no
3c0ef626 54
55# To disable tunneled clear text passwords, change to no here!
e9a17296 56#PasswordAuthentication yes
57#PermitEmptyPasswords no
3c0ef626 58
e9a17296 59# Change to no to disable s/key passwords
60#ChallengeResponseAuthentication yes
3c0ef626 61
e9a17296 62# Kerberos options
63# KerberosAuthentication automatically enabled if keyfile exists
64#KerberosAuthentication yes
3c0ef626 65#KerberosOrLocalPasswd yes
e9a17296 66#KerberosTicketCleanup yes
67
68# AFSTokenPassing automatically enabled if k_hasafs() is true
69#AFSTokenPassing yes
3c0ef626 70
e9a17296 71# Kerberos TGT Passing only works with the AFS kaserver
72#KerberosTgtPassing no
73
74# Set this to 'yes' to enable PAM keyboard-interactive authentication
75# Warning: enabling this may bypass the setting of 'PasswordAuthentication'
76#PAMAuthenticationViaKbdInt yes
3c0ef626 77
e9a17296 78#X11Forwarding no
79#X11DisplayOffset 10
80#X11UseLocalhost yes
81#PrintMotd yes
82#PrintLastLog yes
83#KeepAlive yes
3c0ef626 84#UseLogin no
85
e9a17296 86#MaxStartups 10
87# no default banner path
88#Banner /some/path
89#VerifyReverseMapping no
3c0ef626 90
e9a17296 91# override default of no subsystems
3c0ef626 92Subsystem sftp /usr/libexec/sftp-server
This page took 0.067018 seconds and 5 git commands to generate.