/[adm]/puppet/modules/openssh/templates/sshd_config
ViewVC logotype

Contents of /puppet/modules/openssh/templates/sshd_config

Parent Directory Parent Directory | Revision Log Revision Log


Revision 11 - (show annotations) (download)
Tue Oct 26 17:24:15 2010 UTC (10 years ago) by misc
File size: 3416 byte(s)
- add openssh module

1 # $OpenBSD: sshd_config,v 1.81 2009/10/08 14:03:41 markus Exp $
2
3 # This is the sshd server system-wide configuration file. See
4 # sshd_config(5) for more information.
5
6 # This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin
7
8 # The strategy used for options in the default sshd_config shipped with
9 # OpenSSH is to specify options with their default value where
10 # possible, but leave them commented. Uncommented options change a
11 # default value.
12
13 #Port 22
14 #AddressFamily any
15 #ListenAddress 0.0.0.0
16 #ListenAddress ::
17
18 # The default requires explicit activation of protocol 1
19 #Protocol 2
20
21 # HostKey for protocol version 1
22 HostKey /etc/ssh/ssh_host_key
23 # HostKeys for protocol version 2
24 HostKey /etc/ssh/ssh_host_rsa_key
25 HostKey /etc/ssh/ssh_host_dsa_key
26
27 # Lifetime and size of ephemeral version 1 server key
28 #KeyRegenerationInterval 1h
29 #ServerKeyBits 1024
30
31 # Logging
32 # obsoletes QuietMode and FascistLogging
33 #SyslogFacility AUTH
34 #LogLevel INFO
35
36 # Authentication:
37
38 #LoginGraceTime 2m
39 PermitRootLogin without-password
40 #StrictModes yes
41 #MaxAuthTries 6
42 #MaxSessions 10
43
44 #RSAAuthentication yes
45 #PubkeyAuthentication yes
46 #AuthorizedKeysFile .ssh/authorized_keys
47
48 # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
49 #RhostsRSAAuthentication no
50 # similar for protocol version 2
51 #HostbasedAuthentication no
52 # Change to yes if you don't trust ~/.ssh/known_hosts for
53 # RhostsRSAAuthentication and HostbasedAuthentication
54 #IgnoreUserKnownHosts no
55 # Don't read the user's ~/.rhosts and ~/.shosts files
56 #IgnoreRhosts yes
57
58 # To disable tunneled clear text passwords, change to no here!
59 #PasswordAuthentication yes
60 #PermitEmptyPasswords no
61
62 # Change to no to disable s/key passwords
63 #ChallengeResponseAuthentication yes
64
65 # Kerberos options
66 #KerberosAuthentication no
67 #KerberosOrLocalPasswd yes
68 #KerberosTicketCleanup yes
69 #KerberosGetAFSToken no
70
71 # GSSAPI options
72 #GSSAPIAuthentication no
73 #GSSAPICleanupCredentials yes
74
75 # Set this to 'yes' to enable PAM authentication, account processing,
76 # and session processing. If this is enabled, PAM authentication will
77 # be allowed through the ChallengeResponseAuthentication and
78 # PasswordAuthentication. Depending on your PAM configuration,
79 # PAM authentication via ChallengeResponseAuthentication may bypass
80 # the setting of "PermitRootLogin without-password".
81 # If you just want the PAM account and session checks to run without
82 # PAM authentication, then enable this but set PasswordAuthentication
83 # and ChallengeResponseAuthentication to 'no'.
84 #UsePAM no
85
86 # Accept locale-related environment variables
87 AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
88 AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
89 AcceptEnv LC_IDENTIFICATION LC_ALL
90
91 #AllowAgentForwarding yes
92 #AllowTcpForwarding yes
93 #GatewayPorts no
94 X11Forwarding yes
95 #X11DisplayOffset 10
96 #X11UseLocalhost yes
97 #PrintMotd yes
98 #PrintLastLog yes
99 #TCPKeepAlive yes
100 #UseLogin no
101 UsePrivilegeSeparation yes
102 #PermitUserEnvironment no
103 #Compression delayed
104 #ClientAliveInterval 0
105 #ClientAliveCountMax 3
106 #UseDNS yes
107 #PidFile /var/run/sshd.pid
108 #MaxStartups 10
109 #PermitTunnel no
110 #ChrootDirectory none
111
112 # no default banner path
113 #Banner none
114
115 # override default of no subsystems
116 Subsystem sftp <%= path_to_sftp %>/sftp-server
117
118 # Example of overriding settings on a per-user basis
119 #Match User anoncvs
120 # X11Forwarding no
121 # AllowTcpForwarding no
122 # ForceCommand cvs server

  ViewVC Help
Powered by ViewVC 1.1.28