| 1 | # $OpenBSD: ssh_config,v 1.23 2007/06/08 04:40:40 pvalchev Exp $ |
|---|
| 2 | |
|---|
| 3 | # This is the ssh client system-wide configuration file. See |
|---|
| 4 | # ssh_config(5) for more information. This file provides defaults for |
|---|
| 5 | # users, and the values can be changed in per-user configuration files |
|---|
| 6 | # or on the command line. |
|---|
| 7 | |
|---|
| 8 | # Configuration data is parsed as follows: |
|---|
| 9 | # 1. command line options |
|---|
| 10 | # 2. user-specific file |
|---|
| 11 | # 3. system-wide file |
|---|
| 12 | # Any configuration value is only changed the first time it is set. |
|---|
| 13 | # Thus, host-specific definitions should be at the beginning of the |
|---|
| 14 | # configuration file, and defaults at the end. |
|---|
| 15 | |
|---|
| 16 | # Site-wide defaults for some commonly used options. For a comprehensive |
|---|
| 17 | # list of available options, their meanings and defaults, please see the |
|---|
| 18 | # ssh_config(5) man page. |
|---|
| 19 | |
|---|
| 20 | # Host * |
|---|
| 21 | # ForwardAgent no |
|---|
| 22 | # ForwardX11 no |
|---|
| 23 | # RhostsRSAAuthentication no |
|---|
| 24 | # RSAAuthentication yes |
|---|
| 25 | EnableSSHKeysign yes |
|---|
| 26 | PasswordAuthentication no |
|---|
| 27 | HostbasedAuthentication yes |
|---|
| 28 | # GSSAPIAuthentication no |
|---|
| 29 | # GSSAPIDelegateCredentials no |
|---|
| 30 | # BatchMode no |
|---|
| 31 | # CheckHostIP yes |
|---|
| 32 | # AddressFamily any |
|---|
| 33 | # ConnectTimeout 0 |
|---|
| 34 | # StrictHostKeyChecking ask |
|---|
| 35 | # IdentityFile ~/.ssh/identity |
|---|
| 36 | # IdentityFile ~/.ssh/id_rsa |
|---|
| 37 | # IdentityFile ~/.ssh/id_dsa |
|---|
| 38 | # Port 22 |
|---|
| 39 | # Protocol 2,1 |
|---|
| 40 | # Cipher 3des |
|---|
| 41 | # Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc |
|---|
| 42 | # MACs hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160 |
|---|
| 43 | # EscapeChar ~ |
|---|
| 44 | # Tunnel no |
|---|
| 45 | # TunnelDevice any:any |
|---|
| 46 | # PermitLocalCommand no |
|---|
| 47 | Host * |
|---|
| 48 | GSSAPIAuthentication yes |
|---|
| 49 | # If this option is set to yes then remote X11 clients will have full access |
|---|
| 50 | # to the original X11 display. As virtually no X11 client supports the untrusted |
|---|
| 51 | # mode correctly we set this to yes. |
|---|
| 52 | ForwardX11Trusted yes |
|---|
| 53 | # Send locale-related environment variables |
|---|
| 54 | SendEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES |
|---|
| 55 | SendEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT |
|---|
| 56 | SendEnv LC_IDENTIFICATION LC_ALL LANGUAGE |
|---|