sshd_config revision 57429
157429Smarkm# This is ssh server systemwide configuration file.
257429Smarkm
357429SmarkmPort 22
457429Smarkm#ListenAddress 0.0.0.0
557429Smarkm#ListenAddress ::
657429SmarkmHostKey /etc/ssh_host_key
757429SmarkmServerKeyBits 768
857429SmarkmLoginGraceTime 600
957429SmarkmKeyRegenerationInterval 3600
1057429SmarkmPermitRootLogin yes
1157429Smarkm#
1257429Smarkm# Don't read ~/.rhosts and ~/.shosts files
1357429SmarkmIgnoreRhosts yes
1457429Smarkm# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
1557429Smarkm#IgnoreUserKnownHosts yes
1657429SmarkmStrictModes yes
1757429SmarkmX11Forwarding no
1857429SmarkmX11DisplayOffset 10
1957429SmarkmPrintMotd yes
2057429SmarkmKeepAlive yes
2157429Smarkm
2257429Smarkm# Logging
2357429SmarkmSyslogFacility AUTH
2457429SmarkmLogLevel INFO
2557429Smarkm#obsoletes QuietMode and FascistLogging
2657429Smarkm
2757429SmarkmRhostsAuthentication no
2857429Smarkm#
2957429Smarkm# For this to work you will also need host keys in /etc/ssh_known_hosts
3057429SmarkmRhostsRSAAuthentication no
3157429Smarkm#
3257429SmarkmRSAAuthentication yes
3357429Smarkm
3457429Smarkm# To disable tunneled clear text passwords, change to no here!
3557429SmarkmPasswordAuthentication yes
3657429SmarkmPermitEmptyPasswords no
3757429Smarkm# Uncomment to disable s/key passwords 
3857429Smarkm#SkeyAuthentication no
3957429Smarkm
4057429Smarkm# To change Kerberos options
4157429Smarkm#KerberosAuthentication no
4257429Smarkm#KerberosOrLocalPasswd yes
4357429Smarkm#AFSTokenPassing no
4457429Smarkm#KerberosTicketCleanup no
4557429Smarkm
4657429Smarkm# Kerberos TGT Passing does only work with the AFS kaserver
4757429Smarkm#KerberosTgtPassing yes
4857429Smarkm
4957429Smarkm#CheckMail yes
5057429Smarkm#UseLogin no
51