Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. =================================================================== RCS file: /ftp/cvs/cvsroot/src/crypto/dist/ssh/Attic/sshd_config,v retrieving revision 1.10 retrieving revision 1.18 diff -u -p -r1.10 -r1.18 --- src/crypto/dist/ssh/Attic/sshd_config 2002/03/08 02:00:57 1.10 +++ src/crypto/dist/ssh/Attic/sshd_config 2003/07/24 15:31:56 1.18 @@ -1,8 +1,8 @@ -# $NetBSD: sshd_config,v 1.10 2002/03/08 02:00:57 itojun Exp $ -# $OpenBSD: sshd_config,v 1.48 2002/02/19 02:50:59 deraadt Exp $ +# $NetBSD: sshd_config,v 1.18 2003/07/24 15:31:56 itojun Exp $ +# $OpenBSD: sshd_config,v 1.59 2002/09/25 11:17:16 markus Exp $ -# This is the sshd server system-wide configuration file. See sshd(8) -# for more information. +# This is the sshd server system-wide configuration file. See +# sshd_config(5) for more information. # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where @@ -15,10 +15,10 @@ #ListenAddress :: # HostKey for protocol version 1 -#HostKey /etc/ssh_host_key +#HostKey /etc/ssh/ssh_host_key # HostKeys for protocol version 2 -#HostKey /etc/ssh_host_rsa_key -#HostKey /etc/ssh_host_dsa_key +#HostKey /etc/ssh/ssh_host_rsa_key +#HostKey /etc/ssh/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key #KeyRegenerationInterval 3600 @@ -31,7 +31,7 @@ # Authentication: -#LoginGraceTime 600 +#LoginGraceTime 120 #PermitRootLogin no #StrictModes yes @@ -44,7 +44,7 @@ # Don't read the user's ~/.rhosts and ~/.shosts files #IgnoreRhosts yes #IgnoreRootRhosts yes -# For this to work you will also need host keys in /etc/ssh_known_hosts +# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts #RhostsRSAAuthentication no # similar for protocol version 2 #HostbasedAuthentication no @@ -60,13 +60,11 @@ #ChallengeResponseAuthentication yes # Kerberos options -# KerberosAuthentication automatically enabled if keyfile exists -#KerberosAuthentication yes +#KerberosAuthentication no #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes -# AFSTokenPassing automatically enabled if k_hasafs() is true -#AFSTokenPassing yes +#AFSTokenPassing no # Kerberos TGT Passing only works with the AFS kaserver #KerberosTgtPassing no @@ -78,6 +76,9 @@ #PrintLastLog yes #KeepAlive yes #UseLogin no +#UsePrivilegeSeparation yes +#PermitUserEnvironment no +#Compression yes #MaxStartups 10 # no default banner path