[BACK]Return to sshd_config CVS log [TXT][DIR] Up to [cvs.NetBSD.org] / src / crypto / dist / ssh

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

Diff for /src/crypto/dist/ssh/Attic/sshd_config between version 1.4 and 1.28

version 1.4, 2001/04/10 08:08:04 version 1.28, 2007/12/21 01:03:58
Line 1 
Line 1 
 #       $NetBSD$  #       $NetBSD$
 #       $OpenBSD: sshd_config,v 1.34 2001/02/24 10:37:26 deraadt Exp $  #       $OpenBSD: sshd_config,v 1.75 2007/03/19 01:01:29 djm Exp $
   
 # This is the sshd server system-wide configuration file.  See sshd(8)  # This is the sshd server system-wide configuration file.  See
 # for more information.  # sshd_config(5) for more information.
   
 Port 22  # The strategy used for options in the default sshd_config shipped with
 #Protocol 2,1  # OpenSSH is to specify options with their default value where
   # possible, but leave them commented.  Uncommented options change a
   # default value.
   
   #Port 22
   Protocol 2
   #AddressFamily any
 #ListenAddress 0.0.0.0  #ListenAddress 0.0.0.0
 #ListenAddress ::  #ListenAddress ::
 HostKey /etc/ssh_host_key  
 HostKey /etc/ssh_host_rsa_key  # Disable legacy (protocol version 1) support in the server for new
 HostKey /etc/ssh_host_dsa_key  # installations. In future the default will change to require explicit
 ServerKeyBits 768  # activation of protocol 1
 LoginGraceTime 600  Protocol 2
 KeyRegenerationInterval 3600  
 PermitRootLogin yes  # HostKey for protocol version 1
 #  #HostKey /etc/ssh/ssh_host_key
 # Don't read ~/.rhosts and ~/.shosts files  # HostKeys for protocol version 2
 IgnoreRhosts yes  #HostKey /etc/ssh/ssh_host_rsa_key
 IgnoreRootRhosts yes  #HostKey /etc/ssh/ssh_host_dsa_key
 # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication  
 #IgnoreUserKnownHosts yes  # Lifetime and size of ephemeral version 1 server key
 StrictModes yes  #KeyRegenerationInterval 1h
 X11Forwarding no  #ServerKeyBits 768
 X11DisplayOffset 10  
 PrintMotd yes  
 #PrintLastLog no  
 KeepAlive yes  
   
 # Logging  # Logging
 SyslogFacility AUTH  # obsoletes QuietMode and FascistLogging
 LogLevel INFO  #SyslogFacility AUTH
 #obsoletes QuietMode and FascistLogging  #LogLevel INFO
   
 RhostsAuthentication no  # Authentication:
 #  
 # For this to work you will also need host keys in /etc/ssh_known_hosts  # Slow machines or long keys may require more processing time.
 RhostsRSAAuthentication no  LoginGraceTime 600
 #  #PermitRootLogin no
 RSAAuthentication yes  #StrictModes yes
   #MaxAuthTries 6
   
   #RSAAuthentication yes
   #PubkeyAuthentication yes
   #AuthorizedKeysFile     .ssh/authorized_keys
   
   # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
   #RhostsRSAAuthentication no
   # similar for protocol version 2
   #HostbasedAuthentication no
   # Change to yes if you don't trust ~/.ssh/known_hosts for
   # RhostsRSAAuthentication and HostbasedAuthentication
   #IgnoreUserKnownHosts no
   # Don't read the user's ~/.rhosts and ~/.shosts files
   #IgnoreRhosts yes
   
 # To disable tunneled clear text passwords, change to no here!  # To disable tunneled clear text passwords, change to no here!
 PasswordAuthentication yes  #PasswordAuthentication yes
 PermitEmptyPasswords no  #PermitEmptyPasswords no
   
 # Uncomment to disable s/key passwords  # Change to no to disable s/key passwords
 #ChallengeResponseAuthentication no  #ChallengeResponseAuthentication yes
   
 # To change Kerberos options  # Kerberos options
 #KerberosAuthentication no  #KerberosAuthentication no
 #KerberosOrLocalPasswd yes  #KerberosOrLocalPasswd yes
 #AFSTokenPassing no  #KerberosTicketCleanup yes
 #KerberosTicketCleanup no  #KerberosGetAFSToken no
   
 # Kerberos TGT Passing does only work with the AFS kaserver  
 #KerberosTgtPassing yes  
   
 #CheckMail yes  # GSSAPI options
   #GSSAPIAuthentication no
   #GSSAPICleanupCredentials yes
   
   #AllowTcpForwarding yes
   #GatewayPorts no
   #X11Forwarding no
   # If you use xorg from pkgsrc then uncomment the following line.
   #XAuthLocation /usr/pkg/bin/xauth
   #X11DisplayOffset 10
   #X11UseLocalhost yes
   #PrintMotd yes
   #PrintLastLog yes
   #TCPKeepAlive yes
 #UseLogin no  #UseLogin no
   #UsePrivilegeSeparation yes
   UsePam yes
   #PermitUserEnvironment no
   #Compression delayed
   #ClientAliveInterval 0
   #ClientAliveCountMax 3
   #UseDNS yes
   #PidFile /var/run/sshd.pid
   #MaxStartups 10
   #PermitTunnel no
   
 #MaxStartups 10:30:60  # no default banner path
 #Banner /etc/issue.net  #Banner /some/path
 #ReverseMappingCheck yes  
   
   # override default of no subsystems
 Subsystem       sftp    /usr/libexec/sftp-server  Subsystem       sftp    /usr/libexec/sftp-server
   
   # Example of overriding settings on a per-user basis
   #Match User anoncvs
   #       X11Forwarding no
   #       AllowTcpForwarding no
   #       ForceCommand cvs server

Legend:
Removed from v.1.4  
changed lines
  Added in v.1.28

CVSweb <webmaster@jp.NetBSD.org>