sshd_config revision 65674
157429Smarkm# This is ssh server systemwide configuration file.
257432Smarkm#
357432Smarkm# $FreeBSD: head/crypto/openssh/sshd_config 65674 2000-09-10 09:35:38Z kris $
457429Smarkm
557429SmarkmPort 22
660576Skris#Protocol 2,1
757429Smarkm#ListenAddress 0.0.0.0
857429Smarkm#ListenAddress ::
957493SpeterHostKey /etc/ssh/ssh_host_key
1060678SkrisHostDsaKey /etc/ssh/ssh_host_dsa_key
1157429SmarkmServerKeyBits 768
1265022SkrisLoginGraceTime 120
1357429SmarkmKeyRegenerationInterval 3600
1457432SmarkmPermitRootLogin no
1557432Smarkm# Rate-limit sshd connections to 5 connections per 10 seconds
1657432SmarkmConnectionsPerPeriod 5/10
1757429Smarkm# Don't read ~/.rhosts and ~/.shosts files
1857429SmarkmIgnoreRhosts yes
1957429Smarkm# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
2057429Smarkm#IgnoreUserKnownHosts yes
2157429SmarkmStrictModes yes
2265357SkrisX11Forwarding yes
2357429SmarkmX11DisplayOffset 10
2457429SmarkmPrintMotd yes
2557429SmarkmKeepAlive yes
2657429Smarkm
2757429Smarkm# Logging
2857429SmarkmSyslogFacility AUTH
2957429SmarkmLogLevel INFO
3057429Smarkm#obsoletes QuietMode and FascistLogging
3157429Smarkm
3257429SmarkmRhostsAuthentication no
3357429Smarkm#
3457429Smarkm# For this to work you will also need host keys in /etc/ssh_known_hosts
3557429SmarkmRhostsRSAAuthentication no
3657429Smarkm#
3757429SmarkmRSAAuthentication yes
3857429Smarkm
3957429Smarkm# To disable tunneled clear text passwords, change to no here!
4057429SmarkmPasswordAuthentication yes
4157429SmarkmPermitEmptyPasswords no
4257429Smarkm# Uncomment to disable s/key passwords 
4357429Smarkm#SkeyAuthentication no
4457429Smarkm
4557429Smarkm# To change Kerberos options
4657429Smarkm#KerberosAuthentication no
4757429Smarkm#KerberosOrLocalPasswd yes
4857429Smarkm#AFSTokenPassing no
4957429Smarkm#KerberosTicketCleanup no
5057429Smarkm
5157429Smarkm# Kerberos TGT Passing does only work with the AFS kaserver
5257429Smarkm#KerberosTgtPassing yes
5357429Smarkm
5460813SacheCheckMail yes
5557429Smarkm#UseLogin no
5665674Skris
5765674Skris# Uncomment if you want to enable sftp
5865674Skris#Subsystem	sftp	/usr/libexec/sftp-server
5965674Skris#MaxStartups 10:30:60
60