danwin1210/hosting
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Simplified sshd_config

Browse Source
This commit is contained in:
Daniel Winzen
2018-12-07 13:25:30 +01:00
parent 756e16b533
commit 4b25310396
1 changed files with 1 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
etc/ssh/sshd_config
View File

@ -60,18 +60,6 @@ MaxAuthTries 3
# some PAM modules and threads) # some PAM modules and threads)
ChallengeResponseAuthentication no ChallengeResponseAuthentication no
# Kerberos options
#KerberosAuthentication no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes
#KerberosGetAFSToken no
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes
#GSSAPIStrictAcceptorCheck yes
#GSSAPIKeyExchange no
# Set this to 'yes' to enable PAM authentication, account processing, # Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will # and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and # be allowed through the ChallengeResponseAuthentication and
@ -83,12 +71,7 @@ ChallengeResponseAuthentication no
# and ChallengeResponseAuthentication to 'no'. # and ChallengeResponseAuthentication to 'no'.
UsePAM yes UsePAM yes
#AllowAgentForwarding yes DisableForwarding yes
#AllowTcpForwarding yes
#GatewayPorts no
X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PermitTTY yes #PermitTTY yes
PrintMotd no PrintMotd no
#PrintLastLog yes #PrintLastLog yes
@ -101,7 +84,6 @@ PrintMotd no
UseDNS no UseDNS no
#PidFile /var/run/sshd.pid #PidFile /var/run/sshd.pid
#MaxStartups 10:30:100 #MaxStartups 10:30:100
#PermitTunnel no
#ChrootDirectory none #ChrootDirectory none
#VersionAddendum none #VersionAddendum none
@ -123,16 +105,6 @@ MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,umac-128-etm@op
Match User root Match User root
AuthenticationMethods publickey AuthenticationMethods publickey
# Example of overriding settings on a per-user basis
#Match User anoncvs
# X11Forwarding no
# AllowTcpForwarding no
# PermitTTY no
# ForceCommand cvs server
Match Group www-data Match Group www-data
ChrootDirectory %h ChrootDirectory %h
ForceCommand internal-sftp ForceCommand internal-sftp
AllowTcpForwarding no
X11Forwarding no
DisableForwarding yes