openssh/sshd_config

# This is ssh server systemwide configuration file.

Port 22
ListenAddress 0.0.0.0
HostKey /etc/ssh/ssh_host_key
ServerKeyBits 768
LoginGraceTime 600
KeyRegenerationInterval 3600
PermitRootLogin yes
StrictModes yes
X11Forwarding no
X11DisplayOffset 10
PrintMotd yes
KeepAlive yes
CheckMail no
UseLogin no

#
# Loglevel replaces QuietMode and FascistLogging
#
SyslogFacility AUTH
LogLevel INFO

#
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#
RhostsRSAAuthentication no

#
# Don't read ~/.rhosts and ~/.shosts files
#
IgnoreRhosts yes
RhostsAuthentication no

#
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
#
#IgnoreUserKnownHosts yes

RSAAuthentication yes

# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication yes
PermitEmptyPasswords no

#
# Uncomment to disable s/key passwords (must be compiled with s/key support)
#
#SkeyAuthentication no

#
# To change Kerberos options (must be compiled with Kerberos support)
#
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#AFSTokenPassing no
#KerberosTicketCleanup no
# Kerberos TGT Passing does only work with the AFS kaserver
#KerberosTgtPassing yes
Initial revision 1999-10-27 03:42:43 +00:00			`# This is ssh server systemwide configuration file.`

			`Port 22`
			`ListenAddress 0.0.0.0`
Renamed open* -> * at request of Theo de Raadt <deraadt@cvs.openbsd.org> 1999-10-28 23:18:29 +00:00			`HostKey /etc/ssh/ssh_host_key`
Initial revision 1999-10-27 03:42:43 +00:00			`ServerKeyBits 768`
			`LoginGraceTime 600`
			`KeyRegenerationInterval 3600`
			`PermitRootLogin yes`
			`StrictModes yes`
- Merged changes from OpenBSD CVS - [sshd.c] session_key_int may be zero - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config] IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok deraadt,millert - Brought default sshd_config more in line with OpenBSDs 1999-11-12 00:33:04 +00:00			`X11Forwarding no`
Initial revision 1999-10-27 03:42:43 +00:00			`X11DisplayOffset 10`
			`PrintMotd yes`
			`KeepAlive yes`
Cleanup of default config for new LogLevel option and better readability 1999-11-11 10:07:00 +00:00			`CheckMail no`
			`UseLogin no`
- Tidied default config file some more - Revised Redhat initscript to fix bug: sshd (re)start would fail if executed from inside a ssh login. 1999-11-13 12:56:35 +00:00
			`#`
			`# Loglevel replaces QuietMode and FascistLogging`
			`#`
Initial revision 1999-10-27 03:42:43 +00:00			`SyslogFacility AUTH`
- Tidied default config file some more - Revised Redhat initscript to fix bug: sshd (re)start would fail if executed from inside a ssh login. 1999-11-13 12:56:35 +00:00			`LogLevel INFO`
Cleanup of default config for new LogLevel option and better readability 1999-11-11 10:07:00 +00:00
Initial revision 1999-10-27 03:42:43 +00:00			`#`
Renamed open* -> * at request of Theo de Raadt <deraadt@cvs.openbsd.org> 1999-10-28 23:18:29 +00:00			`# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts`
Initial revision 1999-10-27 03:42:43 +00:00			`#`
Cleanup of default config for new LogLevel option and better readability 1999-11-11 10:07:00 +00:00			`RhostsRSAAuthentication no`

- Merged changes from OpenBSD CVS - [sshd.c] session_key_int may be zero - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config] IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok deraadt,millert - Brought default sshd_config more in line with OpenBSDs 1999-11-12 00:33:04 +00:00			`#`
			`# Don't read ~/.rhosts and ~/.shosts files`
			`#`
			`IgnoreRhosts yes`
- Tidied default config file some more - Revised Redhat initscript to fix bug: sshd (re)start would fail if executed from inside a ssh login. 1999-11-13 12:56:35 +00:00			`RhostsAuthentication no`
- Merged changes from OpenBSD CVS - [sshd.c] session_key_int may be zero - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config] IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok deraadt,millert - Brought default sshd_config more in line with OpenBSDs 1999-11-12 00:33:04 +00:00
			`#`
			`# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication`
			`#`
			`#IgnoreUserKnownHosts yes`

Initial revision 1999-10-27 03:42:43 +00:00			`RSAAuthentication yes`

			`# To disable tunneled clear text passwords, change to no here!`
			`PasswordAuthentication yes`
			`PermitEmptyPasswords no`
Cleanup of default config for new LogLevel option and better readability 1999-11-11 10:07:00 +00:00
			`#`
			`# Uncomment to disable s/key passwords (must be compiled with s/key support)`
			`#`
Initial revision 1999-10-27 03:42:43 +00:00			`#SkeyAuthentication no`

Cleanup of default config for new LogLevel option and better readability 1999-11-11 10:07:00 +00:00			`#`
			`# To change Kerberos options (must be compiled with Kerberos support)`
			`#`
Initial revision 1999-10-27 03:42:43 +00:00			`#KerberosAuthentication no`
			`#KerberosOrLocalPasswd yes`
			`#AFSTokenPassing no`
			`#KerberosTicketCleanup no`
			`# Kerberos TGT Passing does only work with the AFS kaserver`
			`#KerberosTgtPassing yes`