sshd_config revision 69591
1262569Simp# This is ssh server systemwide configuration file.
2262569Simp#
3273712Sian# $FreeBSD: head/crypto/openssh/sshd_config 69591 2000-12-05 02:55:12Z green $
4262569Simp
5262569SimpPort 22
6262569Simp#Protocol 2,1
7262569Simp#ListenAddress 0.0.0.0
8262569Simp#ListenAddress ::
9262569SimpHostKey /etc/ssh/ssh_host_key
10262569SimpHostDsaKey /etc/ssh/ssh_host_dsa_key
11262569SimpServerKeyBits 768
12262569SimpLoginGraceTime 120
13262569SimpKeyRegenerationInterval 3600
14262569SimpPermitRootLogin no
15262569Simp# Deprecated: rate-limit sshd connections to 5 connections per 10 seconds
16262569Simp# ConnectionsPerPeriod 5/10
17262569Simp
18262569Simp# After 10 unauthenticated connections, refuse 30% of the new ones, and
19262569Simp# refuse any more than 60 total.
20262569SimpMaxStartups 10:30:60
21262569Simp# Don't read ~/.rhosts and ~/.shosts files
22262569SimpIgnoreRhosts yes
23262569Simp# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
24262569Simp#IgnoreUserKnownHosts yes
25262569SimpStrictModes yes
26262569SimpX11Forwarding yes
27262569SimpX11DisplayOffset 10
28262569SimpPrintMotd yes
29262569SimpKeepAlive yes
30262569Simp
31262569Simp# Logging
32262569SimpSyslogFacility AUTH
33262569SimpLogLevel INFO
34262569Simp#obsoletes QuietMode and FascistLogging
35262569Simp
36262569SimpRhostsAuthentication no
37262569Simp#
38262569Simp# For this to work you will also need host keys in /etc/ssh_known_hosts
39262569SimpRhostsRSAAuthentication no
40262569Simp#
41262569SimpRSAAuthentication yes
42262569Simp
43# To disable tunneled clear text passwords, change to no here!
44PasswordAuthentication yes
45PermitEmptyPasswords no
46# Uncomment to disable s/key passwords 
47#SkeyAuthentication no
48#KbdInteractiveAuthentication yes
49
50# To change Kerberos options
51#KerberosAuthentication no
52#KerberosOrLocalPasswd yes
53#AFSTokenPassing no
54#KerberosTicketCleanup no
55
56# Kerberos TGT Passing does only work with the AFS kaserver
57#KerberosTgtPassing yes
58
59CheckMail yes
60#UseLogin no
61
62# Uncomment if you want to enable sftp
63#Subsystem	sftp	/usr/libexec/sftp-server
64