Darren Tucker | ad92df7 | 2013-10-10 10:24:11 +1100 | [diff] [blame^] | 1 | # $OpenBSD: ssh_config,v 1.28 2013/09/16 11:35:43 sthen Exp $ |
Ben Lindstrom | 36579d3 | 2001-01-29 07:39:26 +0000 | [diff] [blame] | 2 | |
Ben Lindstrom | 9721e92 | 2002-06-21 01:06:03 +0000 | [diff] [blame] | 3 | # This is the ssh client system-wide configuration file. See |
| 4 | # ssh_config(5) for more information. This file provides defaults for |
| 5 | # users, and the values can be changed in per-user configuration files |
| 6 | # or on the command line. |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 7 | |
| 8 | # Configuration data is parsed as follows: |
| 9 | # 1. command line options |
| 10 | # 2. user-specific file |
| 11 | # 3. system-wide file |
| 12 | # Any configuration value is only changed the first time it is set. |
| 13 | # Thus, host-specific definitions should be at the beginning of the |
| 14 | # configuration file, and defaults at the end. |
| 15 | |
Darren Tucker | 3f166df | 2005-02-09 09:46:47 +1100 | [diff] [blame] | 16 | # Site-wide defaults for some commonly used options. For a comprehensive |
| 17 | # list of available options, their meanings and defaults, please see the |
| 18 | # ssh_config(5) man page. |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 19 | |
| 20 | # Host * |
Damien Miller | 0bc1bd8 | 2000-11-13 22:57:25 +1100 | [diff] [blame] | 21 | # ForwardAgent no |
| 22 | # ForwardX11 no |
Ben Lindstrom | 914d037 | 2002-06-11 15:55:01 +0000 | [diff] [blame] | 23 | # RhostsRSAAuthentication no |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 24 | # RSAAuthentication yes |
| 25 | # PasswordAuthentication yes |
Ben Lindstrom | 5d35a2f | 2002-07-04 00:19:40 +0000 | [diff] [blame] | 26 | # HostbasedAuthentication no |
Damien Miller | 81a3892 | 2006-06-13 13:01:09 +1000 | [diff] [blame] | 27 | # GSSAPIAuthentication no |
| 28 | # GSSAPIDelegateCredentials no |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 29 | # BatchMode no |
| 30 | # CheckHostIP yes |
Damien Miller | 20a8f97 | 2003-05-18 20:50:30 +1000 | [diff] [blame] | 31 | # AddressFamily any |
Damien Miller | b78d5eb | 2003-05-16 11:39:04 +1000 | [diff] [blame] | 32 | # ConnectTimeout 0 |
Damien Miller | c497e38 | 2002-01-22 23:32:39 +1100 | [diff] [blame] | 33 | # StrictHostKeyChecking ask |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 34 | # IdentityFile ~/.ssh/identity |
Ben Lindstrom | 9323d96 | 2001-04-04 01:58:48 +0000 | [diff] [blame] | 35 | # IdentityFile ~/.ssh/id_rsa |
Damien Miller | c497e38 | 2002-01-22 23:32:39 +1100 | [diff] [blame] | 36 | # IdentityFile ~/.ssh/id_dsa |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 37 | # Port 22 |
Ben Lindstrom | 068f3dc | 2001-03-10 17:15:39 +0000 | [diff] [blame] | 38 | # Protocol 2,1 |
Damien Miller | c497e38 | 2002-01-22 23:32:39 +1100 | [diff] [blame] | 39 | # Cipher 3des |
Damien Miller | e8001d4 | 2009-02-21 12:45:02 +1100 | [diff] [blame] | 40 | # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc |
Damien Miller | 4de545a | 2007-06-11 14:04:42 +1000 | [diff] [blame] | 41 | # MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160 |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 42 | # EscapeChar ~ |
Damien Miller | d27b947 | 2005-12-13 19:29:02 +1100 | [diff] [blame] | 43 | # Tunnel no |
| 44 | # TunnelDevice any:any |
| 45 | # PermitLocalCommand no |
Damien Miller | 9f6fb56 | 2008-11-03 19:15:44 +1100 | [diff] [blame] | 46 | # VisualHostKey no |
Darren Tucker | 7ad8dd2 | 2010-01-12 19:40:27 +1100 | [diff] [blame] | 47 | # ProxyCommand ssh -q -W %h:%p gateway.example.com |
Darren Tucker | c53c2af | 2013-05-16 20:28:16 +1000 | [diff] [blame] | 48 | # RekeyLimit 1G 1h |