- (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen

[openssh.git] / sshd_config

diff --git a/sshd_config b/sshd_config
index ee6af5f8bdb3a650e1296dd8ed34d2761c56ca84..d3bab840aacd889c1cb24052462f28efae238a82 100644 (file)
--- a/sshd_config
+++ b/sshd_config
@@ -1,59 +1,53 @@
 # This is ssh server systemwide configuration file.
 
 Port 22
+#Protocol 2,1
 ListenAddress 0.0.0.0
-HostKey /etc/ssh/ssh_host_key
+#ListenAddress ::
+HostKey /etc/ssh_host_key
 ServerKeyBits 768
 LoginGraceTime 600
 KeyRegenerationInterval 3600
 PermitRootLogin yes
+#
+# Don't read ~/.rhosts and ~/.shosts files
+IgnoreRhosts yes
+# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
+#IgnoreUserKnownHosts yes
 StrictModes yes
 X11Forwarding no
 X11DisplayOffset 10
 PrintMotd yes
 KeepAlive yes
-CheckMail no
-UseLogin no
 
-#
-# Loglevel replaces QuietMode and FascistLogging
-#
+# Logging
 SyslogFacility AUTH
 LogLevel INFO
+#obsoletes QuietMode and FascistLogging
 
-#
-# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
-#
-RhostsRSAAuthentication no
-
-#
-# Don't read ~/.rhosts and ~/.shosts files
-#
-IgnoreRhosts yes
 RhostsAuthentication no
-
 #
-# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
+# For this to work you will also need host keys in /etc/ssh_known_hosts
+RhostsRSAAuthentication no
 #
-#IgnoreUserKnownHosts yes
-
 RSAAuthentication yes
 
 # To disable tunneled clear text passwords, change to no here!
 PasswordAuthentication yes
 PermitEmptyPasswords no
-
-#
-# Uncomment to disable s/key passwords (must be compiled with s/key support)
-#
+# Uncomment to disable s/key passwords 
 #SkeyAuthentication no
 
-#
-# To change Kerberos options (must be compiled with Kerberos support)
-#
+# To change Kerberos options
 #KerberosAuthentication no
 #KerberosOrLocalPasswd yes
 #AFSTokenPassing no
 #KerberosTicketCleanup no
+
 # Kerberos TGT Passing does only work with the AFS kaserver
 #KerberosTgtPassing yes
+
+CheckMail no
+UseLogin no
+
+#Subsystem     sftp    /usr/local/sbin/sftpd