Port 22
ListenAddress ::
ListenAddress 0.0.0.0
Protocol 2

Banner /etc/banner

HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
<% if @osfamily == 'debian' %>
HostKey /etc/ssh/ssh_host_ecdsa_key
<% end %>
UsePrivilegeSeparation yes

KeyRegenerationInterval 3600
ServerKeyBits 768

SyslogFacility AUTH
LogLevel INFO

LoginGraceTime 120
PermitRootLogin without-password
StrictModes yes

RSAAuthentication yes
PubkeyAuthentication yes

IgnoreRhosts yes
RhostsRSAAuthentication no
HostbasedAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
PasswordAuthentication <%= @external_host ? 'no' : 'yes' %>

X11Forwarding yes
X11DisplayOffset 10
PermitTunnel yes
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
UseDNS no

AcceptEnv LANG LC_*

Subsystem sftp /usr/lib/openssh/sftp-server

UsePAM yes
AuthorizedKeysFile %h/.ssh/authorized_keys
AuthorizedKeysFile /etc/ssh/keys/%u

Port 22
ListenAddress ::
ListenAddress 0.0.0.0
Protocol 2

Banner /etc/banner

HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
<% if @osfamily == 'Debian' %>
HostKey /etc/ssh/ssh_host_ecdsa_key
<% end %>
UsePrivilegeSeparation yes

KeyRegenerationInterval 3600
ServerKeyBits 768

SyslogFacility AUTH
LogLevel INFO

LoginGraceTime 120
PermitRootLogin without-password
StrictModes yes

RSAAuthentication yes
PubkeyAuthentication yes

IgnoreRhosts yes
RhostsRSAAuthentication no
HostbasedAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
PasswordAuthentication <%= @external_host ? 'no' : 'yes' %>

X11Forwarding yes
X11DisplayOffset 10
PermitTunnel yes
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
UseDNS no

AcceptEnv LANG LC_*

Subsystem sftp /usr/lib/openssh/sftp-server

UsePAM yes
<% if @osfamily == 'Debian' %>
AuthorizedKeysFile /etc/ssh/keys/%u .ssh/authorized_keys
<% else %>
AuthorizedKeysFile %h/.ssh/authorized_keys
<% end %>

Fix for sshd config options
Fix for sshd config options

Change-Id: I690d2bd2c1c3f8885bcc0f814483facdc6f2443f
Signed-off-by: Igor Shishkin <754e6e0fd0f692545d04d1591d9a3de62bb04f84@mirantis.com>
