| | 1 | # $OpenBSD: sshd_config,v 1.34 2001/02/24 10:37:26 deraadt Exp $ |
| | 2 | |
| | 3 | # This is the sshd server system-wide configuration file. See sshd(8) |
| | 4 | # for more information. |
| | 5 | |
| | 6 | Port 22 |
| | 7 | #Protocol 2,1 |
| | 8 | #ListenAddress 0.0.0.0 |
| | 9 | #ListenAddress :: |
| | 10 | HostKey /etc/ssh_host_key |
| | 11 | HostKey /etc/ssh_host_rsa_key |
| | 12 | HostKey /etc/ssh_host_dsa_key |
| | 13 | ServerKeyBits 768 |
| | 14 | LoginGraceTime 600 |
| | 15 | KeyRegenerationInterval 3600 |
| | 16 | PermitRootLogin yes |
| | 17 | # |
| | 18 | # Don't read ~/.rhosts and ~/.shosts files |
| | 19 | IgnoreRhosts yes |
| | 20 | # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication |
| | 21 | #IgnoreUserKnownHosts yes |
| | 22 | StrictModes yes |
| | 23 | X11Forwarding no |
| | 24 | X11DisplayOffset 10 |
| | 25 | PrintMotd yes |
| | 26 | KeepAlive yes |
| | 27 | |
| | 28 | # Logging |
| | 29 | SyslogFacility AUTH |
| | 30 | LogLevel INFO |
| | 31 | #obsoletes QuietMode and FascistLogging |
| | 32 | |
| | 33 | RhostsAuthentication no |
| | 34 | # |
| | 35 | # For this to work you will also need host keys in /etc/ssh_known_hosts |
| | 36 | RhostsRSAAuthentication no |
| | 37 | # |
| | 38 | RSAAuthentication yes |
| | 39 | |
| | 40 | # To disable tunneled clear text passwords, change to no here! |
| | 41 | PasswordAuthentication yes |
| | 42 | PermitEmptyPasswords no |
| | 43 | |
| | 44 | # Comment to enable s/key passwords or PAM interactive authentication |
| | 45 | # NB. Neither of these are compiled in by default. Please read the |
| | 46 | # notes in the sshd(8) manpage before enabling this on a PAM system. |
| | 47 | ChallengeResponseAuthentication no |
| | 48 | |
| | 49 | # To change Kerberos options |
| | 50 | #KerberosAuthentication no |
| | 51 | #KerberosOrLocalPasswd yes |
| | 52 | #AFSTokenPassing no |
| | 53 | #KerberosTicketCleanup no |
| | 54 | |
| | 55 | # Kerberos TGT Passing does only work with the AFS kaserver |
| | 56 | #KerberosTgtPassing yes |
| | 57 | |
| | 58 | #CheckMail yes |
| | 59 | #UseLogin no |
| | 60 | |
| | 61 | #MaxStartups 10:30:60 |
| | 62 | #Banner /etc/issue.net |
| | 63 | #ReverseMappingCheck yes |
| | 64 | |
| | 65 | Subsystem sftp /usr/libexec/sftp-server |
andersk / openssh.git / blame_incremental