Annotation of src/crypto/dist/ssh/sshd_config, Revision 1.2
1.2 ! itojun 1: # $NetBSD$
1.1 itojun 2: # $OpenBSD: sshd_config,v 1.32 2001/02/06 22:07:50 deraadt Exp $
3:
4: # This is the sshd server system-wide configuration file. See sshd(8)
5: # for more information.
6:
7: Port 22
8: #Protocol 2,1
9: #ListenAddress 0.0.0.0
10: #ListenAddress ::
11: HostKey /etc/ssh_host_key
12: HostKey /etc/ssh_host_dsa_key
13: #HostKey /etc/ssh_host_rsa_key
14: ServerKeyBits 768
15: LoginGraceTime 600
16: KeyRegenerationInterval 3600
17: PermitRootLogin yes
18: #
19: # Don't read ~/.rhosts and ~/.shosts files
20: IgnoreRhosts yes
1.2 ! itojun 21: IgnoreRootRhosts yes
1.1 itojun 22: # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
23: #IgnoreUserKnownHosts yes
24: StrictModes yes
25: X11Forwarding no
26: X11DisplayOffset 10
27: PrintMotd yes
28: KeepAlive yes
29:
30: # Logging
31: SyslogFacility AUTH
32: LogLevel INFO
33: #obsoletes QuietMode and FascistLogging
34:
35: RhostsAuthentication no
36: #
37: # For this to work you will also need host keys in /etc/ssh_known_hosts
38: RhostsRSAAuthentication no
39: #
40: RSAAuthentication yes
41:
42: # To disable tunneled clear text passwords, change to no here!
43: PasswordAuthentication yes
44: PermitEmptyPasswords no
45:
46: # Uncomment to disable s/key passwords
47: #ChallengeResponseAuthentication no
48:
49: # To change Kerberos options
50: #KerberosAuthentication no
51: #KerberosOrLocalPasswd yes
52: #AFSTokenPassing no
53: #KerberosTicketCleanup no
54:
55: # Kerberos TGT Passing does only work with the AFS kaserver
56: #KerberosTgtPassing yes
57:
58: #CheckMail yes
59: #UseLogin no
60:
61: #MaxStartups 10:30:60
62: #Banner /etc/issue.net
63: #ReverseMappingCheck yes
64:
65: Subsystem sftp /usr/libexec/sftp-server
CVSweb <webmaster@jp.NetBSD.org>