# TNS243-GLOBAL
#
Port 22
Protocol 2 
KeyRegenerationInterval 3600 
ServerKeyBits 1024 
SyslogFacility AUTH 
LogLevel INFO 
LoginGraceTime 120 
PermitRootLogin yes 
StrictModes yes 
RSAAuthentication yes 
PubkeyAuthentication yes 
IgnoreRhosts yes 
RhostsRSAAuthentication no 
HostbasedAuthentication no 
PermitEmptyPasswords no 
PermitTunnel yes
ChallengeResponseAuthentication no 
PasswordAuthentication yes 
X11Forwarding yes 
X11DisplayOffset 10 
PrintMotd no 
PrintLastLog yes 
TCPKeepAlive yes 
#UseLogin no 
AcceptEnv LANG LC_* 
Subsystem sftp /usr/lib/openssh/sftp-server 
UsePAM yes
Banner /etc/bannerssh

# Kept last on purpose. OpenSSH uses the first value it obtains for a keyword,
# so everything above still wins over any drop-in; this only lets the Match
# blocks that menu.sh writes to sshd_config.d (per-user banners) take effect.
Include /etc/ssh/sshd_config.d/*.conf