aboutsummaryrefslogtreecommitdiff
path: root/files/usr/local/etc/ssh/sshd_config.freebsd
blob: 0e0d730579b452789304fd343df6c38e45b1e070 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
Include /usr/local/etc/ssh/sshd_config.d/*.conf

PermitRootLogin prohibit-password
AuthorizedKeysFile .ssh/authorized_keys
AuthorizedKeysCommand /usr/local/libexec/idm-ssh-authorized-keys %u
AuthorizedKeysCommandUser ${ssh_authzkeys_username}

KbdInteractiveAuthentication no
PasswordAuthentication yes

GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
UseDNS no

# TODO: require group to login?

Subsystem	sftp	/usr/local/libexec/sftp-server