1*11be35a1SLionel Sambuc# $NetBSD: sshd_config.in,v 1.2 2011/02/11 13:19:46 pooka Exp $ 2*11be35a1SLionel Sambuc 3*11be35a1SLionel Sambuc# Basic settings. 4*11be35a1SLionel SambucPort 10000 5*11be35a1SLionel SambucProtocol 2 6*11be35a1SLionel Sambuc 7*11be35a1SLionel Sambuc# Provide information to the user in case something goes wrong. 8*11be35a1SLionel SambucLogLevel DEBUG1 9*11be35a1SLionel Sambuc 10*11be35a1SLionel Sambuc# The host key. It lives in the work directory because we need to set 11*11be35a1SLionel Sambuc# very strict permissions on it and cannot modify the copy on the source 12*11be35a1SLionel Sambuc# directory. 13*11be35a1SLionel SambucHostKey @WORKDIR@/ssh_host_key 14*11be35a1SLionel Sambuc 15*11be35a1SLionel Sambuc# The authorized keys file we set up during the test to allow the client 16*11be35a1SLionel Sambuc# to safely log in. We need to disable strict modes because ATF_WORKDIR 17*11be35a1SLionel Sambuc# usually lives in /tmp, which has 1777 permissions and are not liked by 18*11be35a1SLionel Sambuc# sshd. 19*11be35a1SLionel SambucAuthorizedKeysFile @WORKDIR@/authorized_keys 20*11be35a1SLionel SambucStrictModes no 21*11be35a1SLionel Sambuc 22*11be35a1SLionel Sambuc# Some settings to allow user runs of sshd. 23*11be35a1SLionel SambucPidFile @WORKDIR@/sshd.pid 24*11be35a1SLionel SambucSubsystem sftp @WORKDIR@/sftp-server 25*11be35a1SLionel SambucUsePam no 26*11be35a1SLionel SambucUsePrivilegeSeparation no 27*11be35a1SLionel Sambuc 28*11be35a1SLionel Sambuc# The root user should also be able to run the tests. 29*11be35a1SLionel SambucPermitRootLogin yes 30*11be35a1SLionel Sambuc 31*11be35a1SLionel Sambuc# Be restrictive about access to the temporary server. Only allow key-based 32*11be35a1SLionel Sambuc# authentication. 33*11be35a1SLionel SambucChallengeResponseAuthentication no 34*11be35a1SLionel SambucGSSAPIAuthentication no 35*11be35a1SLionel SambucHostbasedAuthentication no 36*11be35a1SLionel SambucKerberosAuthentication no 37*11be35a1SLionel SambucMaxAuthTries 1 38*11be35a1SLionel SambucMaxStartups 1 39*11be35a1SLionel SambucPasswordAuthentication no 40*11be35a1SLionel SambucPubkeyAuthentication yes 41