Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. =================================================================== RCS file: /ftp/cvs/cvsroot/src/crypto/dist/ssh/Attic/sshd_config,v retrieving revision 1.1.1.8 retrieving revision 1.10 diff -u -p -r1.1.1.8 -r1.10 --- src/crypto/dist/ssh/Attic/sshd_config 2002/04/22 07:37:58 1.1.1.8 +++ src/crypto/dist/ssh/Attic/sshd_config 2002/03/08 02:00:57 1.10 @@ -1,5 +1,5 @@ -# $NetBSD: sshd_config,v 1.1.1.8 2002/04/22 07:37:58 itojun Exp $ -# $OpenBSD: sshd_config,v 1.50 2002/04/21 16:19:27 stevesk Exp $ +# $NetBSD: sshd_config,v 1.10 2002/03/08 02:00:57 itojun Exp $ +# $OpenBSD: sshd_config,v 1.48 2002/02/19 02:50:59 deraadt Exp $ # This is the sshd server system-wide configuration file. See sshd(8) # for more information. @@ -15,10 +15,10 @@ #ListenAddress :: # HostKey for protocol version 1 -#HostKey /etc/ssh/ssh_host_key +#HostKey /etc/ssh_host_key # HostKeys for protocol version 2 -#HostKey /etc/ssh/ssh_host_rsa_key -#HostKey /etc/ssh/ssh_host_dsa_key +#HostKey /etc/ssh_host_rsa_key +#HostKey /etc/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key #KeyRegenerationInterval 3600 @@ -32,7 +32,7 @@ # Authentication: #LoginGraceTime 600 -#PermitRootLogin yes +#PermitRootLogin no #StrictModes yes #RSAAuthentication yes @@ -43,7 +43,8 @@ #RhostsAuthentication no # Don't read the user's ~/.rhosts and ~/.shosts files #IgnoreRhosts yes -# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts +#IgnoreRootRhosts yes +# For this to work you will also need host keys in /etc/ssh_known_hosts #RhostsRSAAuthentication no # similar for protocol version 2 #HostbasedAuthentication no @@ -64,7 +65,8 @@ #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes -#AFSTokenPassing no +# AFSTokenPassing automatically enabled if k_hasafs() is true +#AFSTokenPassing yes # Kerberos TGT Passing only works with the AFS kaserver #KerberosTgtPassing no @@ -76,7 +78,6 @@ #PrintLastLog yes #KeepAlive yes #UseLogin no -#UsePrivilegeSeparation no #MaxStartups 10 # no default banner path