TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [TCLUG:15482] OpenSSH



I notice that after: RhostsRSAAuthentication, you have nothing.  Also,
Listen address is 0.0.0.0.  Try commenting that out and restarting the
daemon.

Tom Veldhouse
veldy@veldy.net

----- Original Message -----
From: "Adam Maloney" <adam@iexposure.com>
To: <tclug-list@mn-linux.org>
Sent: Monday, April 03, 2000 4:41 PM
Subject: Re: [TCLUG:15482] OpenSSH


> I obviously rode the short bus to work this morning...sorry.
>
> Here's the sshd_config:
> # This is ssh server systemwide configuration file.
>
> Port 22
> ListenAddress 0.0.0.0
> #ListenAddress ::
> HostKey /usr/local/etc/ssh_host_key
> ServerKeyBits 768
> LoginGraceTime 600
> KeyRegenerationInterval 3600
> PermitRootLogin yes
> #
> # Don't read ~/.rhosts and ~/.shosts files
> IgnoreRhosts yes
> # Uncomment if you don't trust ~/.ssh/known_hosts for
> RhostsRSAAuthentication
> #IgnoreUserKnownHosts yes
> StrictModes yes
> X11Forwarding no
> X11DisplayOffset 10
> PrintMotd yes
> KeepAlive yes
>
> # Logging
> SyslogFacility AUTH
> LogLevel INFO
> #obsoletes QuietMode and FascistLogging
>
> RhostsAuthentication no
> #
> # For this to work you will also need host keys in /etc/ssh_known_hosts
> RhostsRSAAuthentication no
> #
> RSAAuthentication yes
>
> # To disable tunneled clear text passwords, change to no here!
> PasswordAuthentication yes
> PermitEmptyPasswords no
> # Uncomment to disable s/key passwords
> #SkeyAuthentication no
>
> # To change Kerberos options
> #KerberosAuthentication no
> #KerberosOrLocalPasswd yes
> #AFSTokenPassing no
> #KerberosTicketCleanup no
>
> # Kerberos TGT Passing does only work with the AFS kaserver
>
> CheckMail no
> UseLogin no
>
> "Thomas T. Veldhouse" wrote:
> >
> > Right.  That was for ssh_config.  How about your sshd_config?  That was
the
> > attached file I sent.
> >
> > Tom Veldhouse
> > veldy@veldy.net
> --
> Adam Maloney
> Systems Administrator
> Internet Exposure, Inc.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org
>
>