summaryrefslogtreecommitdiff
path: root/sshd_config.in
diff options
context:
space:
mode:
Diffstat (limited to 'sshd_config.in')
-rw-r--r--sshd_config.in59
1 files changed, 59 insertions, 0 deletions
diff --git a/sshd_config.in b/sshd_config.in
new file mode 100644
index 000000000..63e3d9829
--- /dev/null
+++ b/sshd_config.in
@@ -0,0 +1,59 @@
1# This is ssh server systemwide configuration file.
2
3Port 22
4ListenAddress 0.0.0.0
5HostKey @sysconfdir@/ssh_host_key
6ServerKeyBits 768
7LoginGraceTime 600
8KeyRegenerationInterval 3600
9PermitRootLogin yes
10StrictModes yes
11X11Forwarding no
12X11DisplayOffset 10
13PrintMotd yes
14KeepAlive yes
15CheckMail no
16UseLogin no
17
18#
19# Loglevel replaces QuietMode and FascistLogging
20#
21SyslogFacility AUTH
22LogLevel INFO
23
24#
25# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
26#
27RhostsRSAAuthentication no
28
29#
30# Don't read ~/.rhosts and ~/.shosts files
31#
32IgnoreRhosts yes
33RhostsAuthentication no
34
35#
36# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
37#
38#IgnoreUserKnownHosts yes
39
40RSAAuthentication yes
41
42# To disable tunneled clear text passwords, change to no here!
43PasswordAuthentication yes
44PermitEmptyPasswords no
45
46#
47# Uncomment to disable s/key passwords (must be compiled with s/key support)
48#
49#SkeyAuthentication no
50
51#
52# To change Kerberos options (must be compiled with Kerberos support)
53#
54#KerberosAuthentication no
55#KerberosOrLocalPasswd yes
56#AFSTokenPassing no
57#KerberosTicketCleanup no
58# Kerberos TGT Passing does only work with the AFS kaserver
59#KerberosTgtPassing yes