Gitiles
Code Review Sign In
gerrit-public.fairphone.software / platform / external / openssh / f52373f732d6b97ce63298dbbec813a13b570d9f / . / sshd_config
blob: 3ef9b929d3aa97c9000346d0fbbd4cc3e0ffdf7e [file] [log] [blame]
Ben Lindstrom7bfff362001-03-26 05:45:53 +0000[diff] [blame]1# $OpenBSD: sshd_config,v 1.35 2001/03/25 13:16:11 stevesk Exp $
Ben Lindstrom36579d32001-01-29 07:39:26 +0000[diff] [blame]2
Tim Rice59ea0a02001-03-10 13:50:45 -0800[diff] [blame]3# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
4
Damien Miller33804262001-02-04 23:20:18 +1100[diff] [blame]5# This is the sshd server system-wide configuration file. See sshd(8)
6# for more information.
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]7
8Port 22
Damien Miller8bb73be2000-04-19 16:26:12 +1000[diff] [blame]9#Protocol 2,1
Kevin Steves8ee4f692001-01-09 15:28:46 +0000[diff] [blame]10#ListenAddress 0.0.0.0
Damien Miller34132e52000-01-14 15:45:46 +1100[diff] [blame]11#ListenAddress ::
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]12HostKey /etc/ssh_host_key
Ben Lindstrom531a4452001-03-05 05:17:18 +0000[diff] [blame]13HostKey /etc/ssh_host_rsa_key
Ben Lindstrom4b00c8b2001-03-05 06:05:35 +0000[diff] [blame]14HostKey /etc/ssh_host_dsa_key
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]15ServerKeyBits 768
16LoginGraceTime 600
17KeyRegenerationInterval 3600
18PermitRootLogin yes
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]19#
20# Don't read ~/.rhosts and ~/.shosts files
21IgnoreRhosts yes
22# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
23#IgnoreUserKnownHosts yes
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]24StrictModes yes
Damien Miller32265091999-11-12 11:33:04 +1100[diff] [blame]25X11Forwarding no
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]26X11DisplayOffset 10
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]27PrintMotd yes
Ben Lindstrom7bfff362001-03-26 05:45:53 +0000[diff] [blame]28#PrintLastLog no
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]29KeepAlive yes
Damien Miller192bd011999-11-13 23:56:35 +1100[diff] [blame]30
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]31# Logging
Kevin Steves8ee4f692001-01-09 15:28:46 +0000[diff] [blame]32SyslogFacility AUTH
Damien Miller192bd011999-11-13 23:56:35 +1100[diff] [blame]33LogLevel INFO
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]34#obsoletes QuietMode and FascistLogging
Damien Miller9ba30241999-11-11 21:07:00 +1100[diff] [blame]35
Damien Miller192bd011999-11-13 23:56:35 +1100[diff] [blame]36RhostsAuthentication no
Damien Miller32265091999-11-12 11:33:04 +1100[diff] [blame]37#
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]38# For this to work you will also need host keys in /etc/ssh_known_hosts
39RhostsRSAAuthentication no
Damien Miller32265091999-11-12 11:33:04 +1100[diff] [blame]40#
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]41RSAAuthentication yes
42
43# To disable tunneled clear text passwords, change to no here!
44PasswordAuthentication yes
45PermitEmptyPasswords no
Damien Miller33804262001-02-04 23:20:18 +1100[diff] [blame]46
Damien Miller1d66c162001-03-04 00:16:20 +1100[diff] [blame]47# Comment to enable s/key passwords or PAM interactive authentication
Damien Millerf85b4d72001-03-04 00:19:00 +1100[diff] [blame]48# NB. Neither of these are compiled in by default. Please read the
49# notes in the sshd(8) manpage before enabling this on a PAM system.
Damien Miller1d66c162001-03-04 00:16:20 +1100[diff] [blame]50ChallengeResponseAuthentication no
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]51
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]52# To change Kerberos options
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]53#KerberosAuthentication no
54#KerberosOrLocalPasswd yes
55#AFSTokenPassing no
56#KerberosTicketCleanup no
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]57
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000[diff] [blame]58# Kerberos TGT Passing does only work with the AFS kaserver
59#KerberosTgtPassing yes
Damien Miller886c63a2000-01-20 23:13:36 +1100[diff] [blame]60
Kevin Steves8ee4f692001-01-09 15:28:46 +0000[diff] [blame]61#CheckMail yes
Damien Millerc30d35c2000-08-30 09:40:09 +1100[diff] [blame]62#UseLogin no
Damien Millerf6d9e222000-06-18 14:50:44 +1000[diff] [blame]63
Damien Miller942da032000-08-18 13:59:06 +1000[diff] [blame]64#MaxStartups 10:30:60
Ben Lindstrom48bd7c12001-01-09 00:35:42 +0000[diff] [blame]65#Banner /etc/issue.net
Damien Miller33804262001-02-04 23:20:18 +1100[diff] [blame]66#ReverseMappingCheck yes
Ben Lindstrome9d04442001-02-10 23:26:35 +0000[diff] [blame]67
68Subsystem sftp /usr/libexec/sftp-server