- niklas@cvs.openbsd.org 2001/01/2001

[openssh.git] / sshd_config

diff --git a/sshd_config b/sshd_config
index 791fd13bd0daeb6729dbba391cdb1f4e280c2f8b..25c0ec3f71b2e9a333e9e02c39ee5e92297d6a92 100644 (file)
--- a/sshd_config
+++ b/sshd_config
@@ -1,64 +1,61 @@
+#      $OpenBSD: sshd_config,v 1.27 2001/01/29 01:58:19 niklas Exp $
+
 # This is ssh server systemwide configuration file.
 
 Port 22
-ListenAddress 0.0.0.0
-HostKey /etc/ssh/ssh_host_key
+#Protocol 2,1
+#ListenAddress 0.0.0.0
+#ListenAddress ::
+HostKey /etc/ssh_host_key
+HostKey /etc/ssh_host_dsa_key
+#HostKey /etc/ssh_host_rsa_key
 ServerKeyBits 768
 LoginGraceTime 600
 KeyRegenerationInterval 3600
 PermitRootLogin yes
-
-#
-# Loglevel replaces QuietMode and FascistLogging
-#
-SyslogFacility AUTH
-LogLevel INFO
-
 #
 # Don't read ~/.rhosts and ~/.shosts files
+IgnoreRhosts yes
+# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
+#IgnoreUserKnownHosts yes
 StrictModes yes
 X11Forwarding no
 X11DisplayOffset 10
-FascistLogging no
 PrintMotd yes
 KeepAlive yes
-CheckMail no
-UseLogin no
+
+# Logging
 SyslogFacility AUTH
-RhostsAuthentication no
+LogLevel INFO
+#obsoletes QuietMode and FascistLogging
 
+RhostsAuthentication no
 #
-# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
-#
+# For this to work you will also need host keys in /etc/ssh_known_hosts
 RhostsRSAAuthentication no
-
 #
-# Don't read ~/.rhosts and ~/.shosts files
-#
-IgnoreRhosts yes
-
-#
-# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
-#
-#IgnoreUserKnownHosts yes
-
 RSAAuthentication yes
 
 # To disable tunneled clear text passwords, change to no here!
 PasswordAuthentication yes
 PermitEmptyPasswords no
-
-#
-# Uncomment to disable s/key passwords (must be compiled with s/key support)
-#
+# Uncomment to disable s/key passwords 
 #SkeyAuthentication no
+#KbdInteractiveAuthentication yes
 
-#
-# To change Kerberos options (must be compiled with Kerberos support)
-#
+# To change Kerberos options
 #KerberosAuthentication no
 #KerberosOrLocalPasswd yes
 #AFSTokenPassing no
 #KerberosTicketCleanup no
+
 # Kerberos TGT Passing does only work with the AFS kaserver
 #KerberosTgtPassing yes
+
+#CheckMail yes
+#UseLogin no
+
+# Uncomment if you want to enable sftp
+#Subsystem     sftp    /usr/libexec/sftp-server
+#MaxStartups 10:30:60
+#Banner /etc/issue.net