diff options
Diffstat (limited to 'meta/recipes-connectivity/openssh/openssh-6.1p1/sshd_config')
| -rw-r--r-- | meta/recipes-connectivity/openssh/openssh-6.1p1/sshd_config | 119 |
1 files changed, 119 insertions, 0 deletions
diff --git a/meta/recipes-connectivity/openssh/openssh-6.1p1/sshd_config b/meta/recipes-connectivity/openssh/openssh-6.1p1/sshd_config new file mode 100644 index 0000000000..4f9b626fbd --- /dev/null +++ b/meta/recipes-connectivity/openssh/openssh-6.1p1/sshd_config | |||
| @@ -0,0 +1,119 @@ | |||
| 1 | # $OpenBSD: sshd_config,v 1.80 2008/07/02 02:24:18 djm Exp $ | ||
| 2 | |||
| 3 | # This is the sshd server system-wide configuration file. See | ||
| 4 | # sshd_config(5) for more information. | ||
| 5 | |||
| 6 | # This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin | ||
| 7 | |||
| 8 | # The strategy used for options in the default sshd_config shipped with | ||
| 9 | # OpenSSH is to specify options with their default value where | ||
| 10 | # possible, but leave them commented. Uncommented options change a | ||
| 11 | # default value. | ||
| 12 | |||
| 13 | #Port 22 | ||
| 14 | #AddressFamily any | ||
| 15 | #ListenAddress 0.0.0.0 | ||
| 16 | #ListenAddress :: | ||
| 17 | |||
| 18 | # Disable legacy (protocol version 1) support in the server for new | ||
| 19 | # installations. In future the default will change to require explicit | ||
| 20 | # activation of protocol 1 | ||
| 21 | Protocol 2 | ||
| 22 | |||
| 23 | # HostKey for protocol version 1 | ||
| 24 | #HostKey /etc/ssh/ssh_host_key | ||
| 25 | # HostKeys for protocol version 2 | ||
| 26 | #HostKey /etc/ssh/ssh_host_rsa_key | ||
| 27 | #HostKey /etc/ssh/ssh_host_dsa_key | ||
| 28 | |||
| 29 | # Lifetime and size of ephemeral version 1 server key | ||
| 30 | #KeyRegenerationInterval 1h | ||
| 31 | #ServerKeyBits 1024 | ||
| 32 | |||
| 33 | # Logging | ||
| 34 | # obsoletes QuietMode and FascistLogging | ||
| 35 | #SyslogFacility AUTH | ||
| 36 | #LogLevel INFO | ||
| 37 | |||
| 38 | # Authentication: | ||
| 39 | |||
| 40 | #LoginGraceTime 2m | ||
| 41 | #PermitRootLogin yes | ||
| 42 | #StrictModes yes | ||
| 43 | #MaxAuthTries 6 | ||
| 44 | #MaxSessions 10 | ||
| 45 | |||
| 46 | #RSAAuthentication yes | ||
| 47 | #PubkeyAuthentication yes | ||
| 48 | #AuthorizedKeysFile .ssh/authorized_keys | ||
| 49 | |||
| 50 | # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts | ||
| 51 | #RhostsRSAAuthentication no | ||
| 52 | # similar for protocol version 2 | ||
| 53 | #HostbasedAuthentication no | ||
| 54 | # Change to yes if you don't trust ~/.ssh/known_hosts for | ||
| 55 | # RhostsRSAAuthentication and HostbasedAuthentication | ||
| 56 | #IgnoreUserKnownHosts no | ||
| 57 | # Don't read the user's ~/.rhosts and ~/.shosts files | ||
| 58 | #IgnoreRhosts yes | ||
| 59 | |||
| 60 | # To disable tunneled clear text passwords, change to no here! | ||
| 61 | #PasswordAuthentication yes | ||
| 62 | #PermitEmptyPasswords no | ||
| 63 | |||
| 64 | # Change to no to disable s/key passwords | ||
| 65 | #ChallengeResponseAuthentication yes | ||
| 66 | |||
| 67 | # Kerberos options | ||
| 68 | #KerberosAuthentication no | ||
| 69 | #KerberosOrLocalPasswd yes | ||
| 70 | #KerberosTicketCleanup yes | ||
| 71 | #KerberosGetAFSToken no | ||
| 72 | |||
| 73 | # GSSAPI options | ||
| 74 | #GSSAPIAuthentication no | ||
| 75 | #GSSAPICleanupCredentials yes | ||
| 76 | |||
| 77 | # Set this to 'yes' to enable PAM authentication, account processing, | ||
| 78 | # and session processing. If this is enabled, PAM authentication will | ||
| 79 | # be allowed through the ChallengeResponseAuthentication and | ||
| 80 | # PasswordAuthentication. Depending on your PAM configuration, | ||
| 81 | # PAM authentication via ChallengeResponseAuthentication may bypass | ||
| 82 | # the setting of "PermitRootLogin without-password". | ||
| 83 | # If you just want the PAM account and session checks to run without | ||
| 84 | # PAM authentication, then enable this but set PasswordAuthentication | ||
| 85 | # and ChallengeResponseAuthentication to 'no'. | ||
| 86 | #UsePAM no | ||
| 87 | |||
| 88 | #AllowAgentForwarding yes | ||
| 89 | #AllowTcpForwarding yes | ||
| 90 | #GatewayPorts no | ||
| 91 | #X11Forwarding no | ||
| 92 | #X11DisplayOffset 10 | ||
| 93 | #X11UseLocalhost yes | ||
| 94 | #PrintMotd yes | ||
| 95 | #PrintLastLog yes | ||
| 96 | #TCPKeepAlive yes | ||
| 97 | #UseLogin no | ||
| 98 | UsePrivilegeSeparation yes | ||
| 99 | #PermitUserEnvironment no | ||
| 100 | Compression no | ||
| 101 | ClientAliveInterval 15 | ||
| 102 | ClientAliveCountMax 4 | ||
| 103 | #UseDNS yes | ||
| 104 | #PidFile /var/run/sshd.pid | ||
| 105 | #MaxStartups 10 | ||
| 106 | #PermitTunnel no | ||
| 107 | #ChrootDirectory none | ||
| 108 | |||
| 109 | # no default banner path | ||
| 110 | #Banner none | ||
| 111 | |||
| 112 | # override default of no subsystems | ||
| 113 | Subsystem sftp /usr/libexec/sftp-server | ||
| 114 | |||
| 115 | # Example of overriding settings on a per-user basis | ||
| 116 | #Match User anoncvs | ||
| 117 | # X11Forwarding no | ||
| 118 | # AllowTcpForwarding no | ||
| 119 | # ForceCommand cvs server | ||
