path: root/files/usr/local/etc/ssh/sshd_config.freebsd

Include /usr/local/etc/ssh/sshd_config.d/*.conf

PermitRootLogin prohibit-password
AuthorizedKeysFile .ssh/authorized_keys
AuthorizedKeysCommand /usr/local/libexec/idm-ssh-authorized-keys %u
AuthorizedKeysCommandUser ${ssh_authzkeys_username}

KbdInteractiveAuthentication no
PasswordAuthentication yes

GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
UseDNS no

Subsystem	sftp	/usr/local/libexec/sftp-server