=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/sshd_config,v retrieving revision 1.21 retrieving revision 1.21.2.4 diff -u -r1.21 -r1.21.2.4 --- src/usr.bin/ssh/sshd_config 2000/10/11 20:14:39 1.21 +++ src/usr.bin/ssh/sshd_config 2001/05/07 21:09:38 1.21.2.4 @@ -1,10 +1,15 @@ -# This is ssh server systemwide configuration file. +# $OpenBSD: sshd_config,v 1.21.2.4 2001/05/07 21:09:38 jason Exp $ +# This is the sshd server system-wide configuration file. See sshd(8) +# for more information. + Port 22 #Protocol 2,1 #ListenAddress 0.0.0.0 #ListenAddress :: HostKey /etc/ssh_host_key +HostKey /etc/ssh_host_rsa_key +HostKey /etc/ssh_host_dsa_key ServerKeyBits 768 LoginGraceTime 600 KeyRegenerationInterval 3600 @@ -18,6 +23,7 @@ X11Forwarding no X11DisplayOffset 10 PrintMotd yes +#PrintLastLog no KeepAlive yes # Logging @@ -29,15 +35,17 @@ # # For this to work you will also need host keys in /etc/ssh_known_hosts RhostsRSAAuthentication no +# similar for protocol version 2 +HostbasedAuthentication no # RSAAuthentication yes # To disable tunneled clear text passwords, change to no here! PasswordAuthentication yes PermitEmptyPasswords no + # Uncomment to disable s/key passwords -#SkeyAuthentication no -#KbdInteractiveAuthentication yes +#ChallengeResponseAuthentication no # To change Kerberos options #KerberosAuthentication no @@ -51,6 +59,8 @@ #CheckMail yes #UseLogin no -# Uncomment if you want to enable sftp -#Subsystem sftp /usr/libexec/sftp-server #MaxStartups 10:30:60 +#Banner /etc/issue.net +#ReverseMappingCheck yes + +Subsystem sftp /usr/libexec/sftp-server