blob: 357c425023ca5ff7b0df68068fb6428f0aae323b [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001# This is ssh server systemwide configuration file.
2
3Port 22
Damien Miller8bb73be2000-04-19 16:26:12 +10004#Protocol 2,1
Damien Millerd4a8b7e1999-10-27 13:42:43 +10005ListenAddress 0.0.0.0
Damien Miller34132e52000-01-14 15:45:46 +11006#ListenAddress ::
Damien Miller886c63a2000-01-20 23:13:36 +11007HostKey /etc/ssh_host_key
Damien Miller0bc1bd82000-11-13 22:57:25 +11008HostKey /etc/ssh_host_rsa_key
9HostKey /etc/ssh_host_dsa_key
Damien Millerd4a8b7e1999-10-27 13:42:43 +100010ServerKeyBits 768
11LoginGraceTime 600
12KeyRegenerationInterval 3600
13PermitRootLogin yes
Damien Miller886c63a2000-01-20 23:13:36 +110014#
15# Don't read ~/.rhosts and ~/.shosts files
16IgnoreRhosts yes
17# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
18#IgnoreUserKnownHosts yes
Damien Millerd4a8b7e1999-10-27 13:42:43 +100019StrictModes yes
Damien Miller32265091999-11-12 11:33:04 +110020X11Forwarding no
Damien Millerd4a8b7e1999-10-27 13:42:43 +100021X11DisplayOffset 10
Damien Millerd4a8b7e1999-10-27 13:42:43 +100022PrintMotd yes
23KeepAlive yes
Damien Miller192bd011999-11-13 23:56:35 +110024
Damien Miller886c63a2000-01-20 23:13:36 +110025# Logging
Damien Miller6dbfef62000-11-29 13:51:06 +110026SyslogFacility AUTHPRIV
Damien Miller192bd011999-11-13 23:56:35 +110027LogLevel INFO
Damien Miller886c63a2000-01-20 23:13:36 +110028#obsoletes QuietMode and FascistLogging
Damien Miller9ba30241999-11-11 21:07:00 +110029
Damien Miller192bd011999-11-13 23:56:35 +110030RhostsAuthentication no
Damien Miller32265091999-11-12 11:33:04 +110031#
Damien Miller886c63a2000-01-20 23:13:36 +110032# For this to work you will also need host keys in /etc/ssh_known_hosts
33RhostsRSAAuthentication no
Damien Miller32265091999-11-12 11:33:04 +110034#
Damien Millerd4a8b7e1999-10-27 13:42:43 +100035RSAAuthentication yes
36
37# To disable tunneled clear text passwords, change to no here!
38PasswordAuthentication yes
39PermitEmptyPasswords no
Damien Miller886c63a2000-01-20 23:13:36 +110040# Uncomment to disable s/key passwords
Damien Millerd4a8b7e1999-10-27 13:42:43 +100041#SkeyAuthentication no
Damien Miller874d77b2000-10-14 16:23:11 +110042#KbdInteractiveAuthentication yes
Damien Millerd4a8b7e1999-10-27 13:42:43 +100043
Damien Miller886c63a2000-01-20 23:13:36 +110044# To change Kerberos options
Damien Millerd4a8b7e1999-10-27 13:42:43 +100045#KerberosAuthentication no
46#KerberosOrLocalPasswd yes
47#AFSTokenPassing no
48#KerberosTicketCleanup no
Damien Miller886c63a2000-01-20 23:13:36 +110049
Damien Millerd4a8b7e1999-10-27 13:42:43 +100050# Kerberos TGT Passing does only work with the AFS kaserver
51#KerberosTgtPassing yes
Damien Miller886c63a2000-01-20 23:13:36 +110052
53CheckMail no
Damien Millerc30d35c2000-08-30 09:40:09 +110054#UseLogin no
Damien Millerf6d9e222000-06-18 14:50:44 +100055
Damien Miller7b28dc52000-09-05 13:34:53 +110056# Uncomment if you want to enable sftp
57#Subsystem sftp /usr/libexec/sftp-server
Damien Miller942da032000-08-18 13:59:06 +100058#MaxStartups 10:30:60