# $Id: sshd_config,v 1.2 2004/11/19 10:31:03 root Exp $

# What ports, IPs and protocols we listen for
Port 22
Protocol 2

# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key

# Connection handling
UsePrivilegeSeparation yes
#MaxStartups 10:30:60
#UseDNS no
KeepAlive yes

# Logging
SyslogFacility AUTH
LogLevel INFO

# Authentication:
LoginGraceTime 600
PermitRootLogin yes
StrictModes yes

# Public key authentication
RSAAuthentication yes
PubkeyAuthentication yes

# Don't use hosts based authentication
IgnoreRhosts yes
RhostsRSAAuthentication no
HostbasedAuthentication no
IgnoreUserKnownHosts yes

# PAM
ChallengeResponseAuthentication yes
UsePAM yes

# Disallow other authentication methods
PermitEmptyPasswords no
PasswordAuthentication no

#
X11Forwarding yes
X11DisplayOffset 10
PrintMotd no
PrintLastLog yes
UseLogin no

# Misc
Subsystem sftp /usr/lib/openssh/sftp-server

