Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. =================================================================== RCS file: /ftp/cvs/cvsroot/src/crypto/dist/ssh/Attic/sshd_config,v retrieving revision 1.1.1.6 retrieving revision 1.5 diff -u -p -r1.1.1.6 -r1.5 --- src/crypto/dist/ssh/Attic/sshd_config 2001/09/27 02:01:01 1.1.1.6 +++ src/crypto/dist/ssh/Attic/sshd_config 2001/05/15 15:26:11 1.5 @@ -1,5 +1,5 @@ -# $NetBSD: sshd_config,v 1.1.1.6 2001/09/27 02:01:01 itojun Exp $ -# $OpenBSD: sshd_config,v 1.42 2001/09/20 20:57:51 mouring Exp $ +# $OpenBSD: sshd_config,v 1.34 2001/02/24 10:37:26 deraadt Exp $ +# $OpenBSD: sshd_config,v 1.38 2001/04/15 21:41:29 deraadt Exp $ # This is the sshd server system-wide configuration file. See sshd(8) # for more information. @@ -8,42 +8,39 @@ Port 22 #Protocol 2,1 #ListenAddress 0.0.0.0 #ListenAddress :: - -# HostKey for protocol version 1 HostKey /etc/ssh_host_key -# HostKeys for protocol version 2 HostKey /etc/ssh_host_rsa_key HostKey /etc/ssh_host_dsa_key - -# Lifetime and size of ephemeral version 1 server key -KeyRegenerationInterval 3600 ServerKeyBits 768 +LoginGraceTime 600 +KeyRegenerationInterval 3600 +PermitRootLogin yes +# +# Don't read ~/.rhosts and ~/.shosts files +IgnoreRhosts yes +IgnoreRootRhosts yes +# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication +#IgnoreUserKnownHosts yes +StrictModes yes +X11Forwarding no +X11DisplayOffset 10 +PrintMotd yes +#PrintLastLog no +KeepAlive yes # Logging SyslogFacility AUTH LogLevel INFO #obsoletes QuietMode and FascistLogging -# Authentication: - -LoginGraceTime 600 -PermitRootLogin yes -StrictModes yes - -RSAAuthentication yes -PubkeyAuthentication yes -#AuthorizedKeysFile %h/.ssh/authorized_keys - -# rhosts authentication should not be used RhostsAuthentication no -# Don't read the user's ~/.rhosts and ~/.shosts files -IgnoreRhosts yes +# # For this to work you will also need host keys in /etc/ssh_known_hosts RhostsRSAAuthentication no # similar for protocol version 2 HostbasedAuthentication no -# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication -#IgnoreUserKnownHosts yes +# +RSAAuthentication yes # To disable tunneled clear text passwords, change to no here! PasswordAuthentication yes @@ -61,11 +58,7 @@ PermitEmptyPasswords no # Kerberos TGT Passing does only work with the AFS kaserver #KerberosTgtPassing yes -X11Forwarding no -X11DisplayOffset 10 -PrintMotd yes -#PrintLastLog no -KeepAlive yes +#CheckMail yes #UseLogin no #MaxStartups 10:30:60