Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. =================================================================== RCS file: /ftp/cvs/cvsroot/src/crypto/dist/ssh/Attic/sshd_config,v retrieving revision 1.1.1.12 retrieving revision 1.19 diff -u -p -r1.1.1.12 -r1.19 --- src/crypto/dist/ssh/Attic/sshd_config 2005/02/13 00:53:25 1.1.1.12 +++ src/crypto/dist/ssh/Attic/sshd_config 2004/05/01 06:06:33 1.19 @@ -1,5 +1,5 @@ -# $NetBSD: sshd_config,v 1.1.1.12 2005/02/13 00:53:25 christos Exp $ -# $OpenBSD: sshd_config,v 1.69 2004/05/23 23:59:53 dtucker Exp $ +# $NetBSD: sshd_config,v 1.19 2004/05/01 06:06:33 jonb Exp $ +# $OpenBSD: sshd_config,v 1.59 2002/09/25 11:17:16 markus Exp $ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. @@ -21,7 +21,7 @@ #HostKey /etc/ssh/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key -#KeyRegenerationInterval 1h +#KeyRegenerationInterval 3600 #ServerKeyBits 768 # Logging @@ -31,15 +31,20 @@ # Authentication: -#LoginGraceTime 2m -#PermitRootLogin yes +# Slow machines or long keys may require more processing time. +LoginGraceTime 600 +#PermitRootLogin no #StrictModes yes -#MaxAuthTries 6 #RSAAuthentication yes #PubkeyAuthentication yes #AuthorizedKeysFile .ssh/authorized_keys +# rhosts authentication should not be used +#RhostsAuthentication no +# Don't read the user's ~/.rhosts and ~/.shosts files +#IgnoreRhosts yes +#IgnoreRootRhosts yes # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts #RhostsRSAAuthentication no # similar for protocol version 2 @@ -47,8 +52,6 @@ # Change to yes if you don't trust ~/.ssh/known_hosts for # RhostsRSAAuthentication and HostbasedAuthentication #IgnoreUserKnownHosts no -# Don't read the user's ~/.rhosts and ~/.shosts files -#IgnoreRhosts yes # To disable tunneled clear text passwords, change to no here! #PasswordAuthentication yes @@ -61,32 +64,27 @@ #KerberosAuthentication no #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes -#KerberosGetAFSToken no -# GSSAPI options -#GSSAPIAuthentication no -#GSSAPICleanupCredentials yes +#AFSTokenPassing no + +# Kerberos TGT Passing only works with the AFS kaserver +#KerberosTgtPassing no -#AllowTcpForwarding yes -#GatewayPorts no #X11Forwarding no #X11DisplayOffset 10 #X11UseLocalhost yes #PrintMotd yes #PrintLastLog yes -#TCPKeepAlive yes +#KeepAlive yes #UseLogin no #UsePrivilegeSeparation yes #PermitUserEnvironment no #Compression yes -#ClientAliveInterval 0 -#ClientAliveCountMax 3 -#UseDNS yes -#PidFile /var/run/sshd.pid -#MaxStartups 10 +#MaxStartups 10 # no default banner path #Banner /some/path +#VerifyReverseMapping no # override default of no subsystems Subsystem sftp /usr/libexec/sftp-server