sshd_config revision 60576
157429Smarkm# This is ssh server systemwide configuration file.
257432Smarkm#
357432Smarkm# $FreeBSD: head/crypto/openssh/sshd_config 60576 2000-05-15 05:24:25Z kris $
457429Smarkm
557429SmarkmPort 22
660576Skris#Protocol 2,1
757429Smarkm#ListenAddress 0.0.0.0
857429Smarkm#ListenAddress ::
957493SpeterHostKey /etc/ssh/ssh_host_key
1057429SmarkmServerKeyBits 768
1157432SmarkmLoginGraceTime 60
1257429SmarkmKeyRegenerationInterval 3600
1357432SmarkmPermitRootLogin no
1457432Smarkm# Rate-limit sshd connections to 5 connections per 10 seconds
1557432SmarkmConnectionsPerPeriod 5/10
1657429Smarkm# Don't read ~/.rhosts and ~/.shosts files
1757429SmarkmIgnoreRhosts yes
1857429Smarkm# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
1957429Smarkm#IgnoreUserKnownHosts yes
2057429SmarkmStrictModes yes
2157429SmarkmX11Forwarding no
2257429SmarkmX11DisplayOffset 10
2357429SmarkmPrintMotd yes
2457429SmarkmKeepAlive yes
2557429Smarkm
2657429Smarkm# Logging
2757429SmarkmSyslogFacility AUTH
2857429SmarkmLogLevel INFO
2957429Smarkm#obsoletes QuietMode and FascistLogging
3057429Smarkm
3157429SmarkmRhostsAuthentication no
3257429Smarkm#
3357429Smarkm# For this to work you will also need host keys in /etc/ssh_known_hosts
3457429SmarkmRhostsRSAAuthentication no
3557429Smarkm#
3657429SmarkmRSAAuthentication yes
3757429Smarkm
3857429Smarkm# To disable tunneled clear text passwords, change to no here!
3957429SmarkmPasswordAuthentication yes
4057429SmarkmPermitEmptyPasswords no
4157429Smarkm# Uncomment to disable s/key passwords 
4257429Smarkm#SkeyAuthentication no
4357429Smarkm
4457429Smarkm# To change Kerberos options
4557429Smarkm#KerberosAuthentication no
4657429Smarkm#KerberosOrLocalPasswd yes
4757429Smarkm#AFSTokenPassing no
4857429Smarkm#KerberosTicketCleanup no
4957429Smarkm
5057429Smarkm# Kerberos TGT Passing does only work with the AFS kaserver
5157429Smarkm#KerberosTgtPassing yes
5257429Smarkm
5357429Smarkm#CheckMail yes
5457429Smarkm#UseLogin no
55