1 # boot cd version 3.x sshd configuration file for debug mode
8 # HostKey for protocol version 1
9 #HostKey /etc/ssh/ssh_host_key
10 # HostKeys for protocol version 2
11 #HostKey /etc/ssh/ssh_host_rsa_key
12 #HostKey /etc/ssh/ssh_host_dsa_key
14 # Lifetime and size of ephemeral version 1 server key
15 #KeyRegenerationInterval 1h
19 #obsoletes QuietMode and FascistLogging
21 SyslogFacility AUTHPRIV
31 #RSAAuthentication yes
32 #PubkeyAuthentication yes
33 #AuthorizedKeysFile .ssh/authorized_keys
35 # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
36 #RhostsRSAAuthentication no
37 # similar for protocol version 2
38 #HostbasedAuthentication no
39 # Change to yes if you don't trust ~/.ssh/known_hosts for
40 # RhostsRSAAuthentication and HostbasedAuthentication
41 #IgnoreUserKnownHosts no
42 # Don't read the user's ~/.rhosts and ~/.shosts files
45 # To disable tunneled clear text passwords, change to no here!
46 #PermitEmptyPasswords no
47 PasswordAuthentication no
49 # Change to no to disable s/key passwords
50 #ChallengeResponseAuthentication yes
51 ChallengeResponseAuthentication no
54 #KerberosAuthentication no
55 #KerberosOrLocalPasswd yes
56 #KerberosTicketCleanup yes
57 #KerberosGetAFSToken no
59 # Set this to 'yes' to enable PAM authentication, account processing,
60 # and session processing. If this is enabled, PAM authentication will
61 # be allowed through the ChallengeResponseAuthentication mechanism.
62 # Depending on your PAM configuration, this may bypass the setting of
63 # PasswordAuthentication, PermitEmptyPasswords, and
64 # "PermitRootLogin without-password". If you just want the PAM account and
65 # session checks to run without PAM authentication, then enable this but set
66 # ChallengeResponseAuthentication=no
68 #AllowTcpForwarding yes
78 #UsePrivilegeSeparation yes
79 #PermitUserEnvironment no
81 #ClientAliveInterval 0
82 #ClientAliveCountMax 3
84 #PidFile /var/run/sshd.pid
88 # no default banner path
91 # override default of no subsystems
92 Subsystem sftp /usr/libexec/openssh/sftp-server