Annotation of src/crypto/dist/ssh/sshd_config, Revision 1.1.1.4
1.1.1.4 ! itojun 1: # $NetBSD$
! 2: # $OpenBSD: sshd_config,v 1.38 2001/04/15 21:41:29 deraadt Exp $
1.1 itojun 3:
4: # This is the sshd server system-wide configuration file. See sshd(8)
5: # for more information.
6:
7: Port 22
8: #Protocol 2,1
9: #ListenAddress 0.0.0.0
10: #ListenAddress ::
11: HostKey /etc/ssh_host_key
1.1.1.2 itojun 12: HostKey /etc/ssh_host_rsa_key
1.1 itojun 13: HostKey /etc/ssh_host_dsa_key
14: ServerKeyBits 768
15: LoginGraceTime 600
16: KeyRegenerationInterval 3600
17: PermitRootLogin yes
18: #
19: # Don't read ~/.rhosts and ~/.shosts files
20: IgnoreRhosts yes
21: # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
22: #IgnoreUserKnownHosts yes
23: StrictModes yes
24: X11Forwarding no
25: X11DisplayOffset 10
26: PrintMotd yes
1.1.1.3 itojun 27: #PrintLastLog no
1.1 itojun 28: KeepAlive yes
29:
30: # Logging
31: SyslogFacility AUTH
32: LogLevel INFO
33: #obsoletes QuietMode and FascistLogging
34:
35: RhostsAuthentication no
36: #
37: # For this to work you will also need host keys in /etc/ssh_known_hosts
38: RhostsRSAAuthentication no
1.1.1.4 ! itojun 39: # similar for protocol version 2
! 40: HostbasedAuthentication no
1.1 itojun 41: #
42: RSAAuthentication yes
43:
44: # To disable tunneled clear text passwords, change to no here!
45: PasswordAuthentication yes
46: PermitEmptyPasswords no
47:
48: # Uncomment to disable s/key passwords
49: #ChallengeResponseAuthentication no
50:
51: # To change Kerberos options
52: #KerberosAuthentication no
53: #KerberosOrLocalPasswd yes
54: #AFSTokenPassing no
55: #KerberosTicketCleanup no
56:
57: # Kerberos TGT Passing does only work with the AFS kaserver
58: #KerberosTgtPassing yes
59:
60: #CheckMail yes
61: #UseLogin no
62:
63: #MaxStartups 10:30:60
64: #Banner /etc/issue.net
65: #ReverseMappingCheck yes
66:
67: Subsystem sftp /usr/libexec/sftp-server
CVSweb <webmaster@jp.NetBSD.org>