sshd_config revision 57429
157429Smarkm# This is ssh server systemwide configuration file. 257429Smarkm 357429SmarkmPort 22 457429Smarkm#ListenAddress 0.0.0.0 557429Smarkm#ListenAddress :: 657429SmarkmHostKey /etc/ssh_host_key 757429SmarkmServerKeyBits 768 857429SmarkmLoginGraceTime 600 957429SmarkmKeyRegenerationInterval 3600 1057429SmarkmPermitRootLogin yes 1157429Smarkm# 1257429Smarkm# Don't read ~/.rhosts and ~/.shosts files 1357429SmarkmIgnoreRhosts yes 1457429Smarkm# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication 1557429Smarkm#IgnoreUserKnownHosts yes 1657429SmarkmStrictModes yes 1757429SmarkmX11Forwarding no 1857429SmarkmX11DisplayOffset 10 1957429SmarkmPrintMotd yes 2057429SmarkmKeepAlive yes 2157429Smarkm 2257429Smarkm# Logging 2357429SmarkmSyslogFacility AUTH 2457429SmarkmLogLevel INFO 2557429Smarkm#obsoletes QuietMode and FascistLogging 2657429Smarkm 2757429SmarkmRhostsAuthentication no 2857429Smarkm# 2957429Smarkm# For this to work you will also need host keys in /etc/ssh_known_hosts 3057429SmarkmRhostsRSAAuthentication no 3157429Smarkm# 3257429SmarkmRSAAuthentication yes 3357429Smarkm 3457429Smarkm# To disable tunneled clear text passwords, change to no here! 3557429SmarkmPasswordAuthentication yes 3657429SmarkmPermitEmptyPasswords no 3757429Smarkm# Uncomment to disable s/key passwords 3857429Smarkm#SkeyAuthentication no 3957429Smarkm 4057429Smarkm# To change Kerberos options 4157429Smarkm#KerberosAuthentication no 4257429Smarkm#KerberosOrLocalPasswd yes 4357429Smarkm#AFSTokenPassing no 4457429Smarkm#KerberosTicketCleanup no 4557429Smarkm 4657429Smarkm# Kerberos TGT Passing does only work with the AFS kaserver 4757429Smarkm#KerberosTgtPassing yes 4857429Smarkm 4957429Smarkm#CheckMail yes 5057429Smarkm#UseLogin no 51