Re: [gentoo-user] ssh configuration guide

["Andrey Falko" <ma3oxuct@gmail.com>]

On Thu, Oct 9, 2008 at 1:06 AM, David Rioja <rams@englobe-tec.com> wrote:
> This is my very first post to the list, so hello you all :)
>
> I've been editing /etc/ssh/sshd_config in order to configure SSH as told in
> the guide at gentoo.org. The options you have to set for a quick start
> configuration are:
>
> Port 22
> Protocol 2
> ServerKeyBits 2048
> SyslogFacility AUTH
> LogLevel INFO
> LoginGraceTime 60
> PermitRootLogin no
> RSAAuthentication no
> PubkeyAuthentication yes
> PasswordAuthentication no
> PermitEmptyPasswords no
> PAMAuthenticationViaKbdInt no
> Compression yes
> KeepAlive yes
> ClientAliveInterval 30
> ClientAliveCountMax 4
>
>
> I have encountered two issues in that:
>
> 1.- When restarting the sshd service you are told PMAAuthenticationViaKbdInt
> is deprecated.
>
> 2.- KeepAlive is not commented in the default configuration file, there is
> TCPKeepAlive instead. I suppose same options are the same. Could anyone
> confim that?
>
> Thanks!
>
>

If you want are truely quick start configuration, you should use the
defaults that get installed after you install ssh. Basically, thost
default will give you a working ssh that is secure and that is more
than likely to work out of box.

I'm not sure which Gentoo quickstart guide you are following, but it
is an out of date guide. I recommend emerge -1 openssh, then running
etc-update and applying the default configuration. Your goal is to get
a basic working ssh daemon, right?