1*11be35a1SLionel Sambuc# $NetBSD: sshd_config.in,v 1.1 2011/02/14 15:14:00 pooka Exp $ 2*11be35a1SLionel Sambuc 3*11be35a1SLionel Sambuc# Basic settings. 4*11be35a1SLionel SambucPort 22 5*11be35a1SLionel SambucProtocol 2 6*11be35a1SLionel Sambuc 7*11be35a1SLionel Sambuc# Provide information to the user in case something goes wrong. 8*11be35a1SLionel SambucLogLevel DEBUG1 9*11be35a1SLionel Sambuc 10*11be35a1SLionel Sambuc# The host key. It lives in the work directory because we need to set 11*11be35a1SLionel Sambuc# very strict permissions on it and cannot modify the copy on the source 12*11be35a1SLionel Sambuc# directory. 13*11be35a1SLionel SambucHostKey @WORKDIR@/ssh_host_key 14*11be35a1SLionel Sambuc 15*11be35a1SLionel Sambuc# The authorized keys file we set up during the test to allow the client 16*11be35a1SLionel Sambuc# to safely log in. We need to disable strict modes because ATF_WORKDIR 17*11be35a1SLionel Sambuc# usually lives in /tmp, which has 1777 permissions and are not liked by 18*11be35a1SLionel Sambuc# sshd. 19*11be35a1SLionel SambucAuthorizedKeysFile @WORKDIR@/authorized_keys 20*11be35a1SLionel SambucStrictModes no 21*11be35a1SLionel Sambuc 22*11be35a1SLionel Sambuc# Some settings to allow user runs of sshd. 23*11be35a1SLionel SambucPidFile @WORKDIR@/sshd.pid 24*11be35a1SLionel SambucUsePam no 25*11be35a1SLionel SambucUsePrivilegeSeparation no 26*11be35a1SLionel Sambuc 27*11be35a1SLionel Sambuc# The root user should also be able to run the tests. 28*11be35a1SLionel SambucPermitRootLogin yes 29*11be35a1SLionel Sambuc 30*11be35a1SLionel Sambuc# Be restrictive about access to the temporary server. Only allow key-based 31*11be35a1SLionel Sambuc# authentication. 32*11be35a1SLionel SambucChallengeResponseAuthentication no 33*11be35a1SLionel SambucGSSAPIAuthentication no 34*11be35a1SLionel SambucHostbasedAuthentication no 35*11be35a1SLionel SambucKerberosAuthentication no 36*11be35a1SLionel SambucMaxAuthTries 1 37*11be35a1SLionel SambucMaxStartups 1 38*11be35a1SLionel SambucPasswordAuthentication no 39*11be35a1SLionel SambucPubkeyAuthentication yes 40