blob: 0e0d730579b452789304fd343df6c38e45b1e070 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
Include /usr/local/etc/ssh/sshd_config.d/*.conf
PermitRootLogin prohibit-password
AuthorizedKeysFile .ssh/authorized_keys
AuthorizedKeysCommand /usr/local/libexec/idm-ssh-authorized-keys %u
AuthorizedKeysCommandUser ${ssh_authzkeys_username}
KbdInteractiveAuthentication no
PasswordAuthentication yes
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
UseDNS no
# TODO: require group to login?
Subsystem sftp /usr/local/libexec/sftp-server
|