search for: max_authkeys_files

I was wondering what everyone's thoughts were on a simpler way to exclude addresses from having listeners on them. I know a lot of people have multiple subnets, especially larger corporations. Some networks are non-route-able, and therefor unsuitable for use with SSH, aside from communication between other servers on the same subnet. Given that we may want to exclude those non-route-able

...h-portable/servconf.h openssh-portable-maxdisplays/servconf.h --- openssh-portable/servconf.h 2016-06-01 21:14:01.820052926 -0400 +++ openssh-portable-maxdisplays/servconf.h 2016-06-01 21:14:22.976053858 -0400 @@ -29,6 +29,7 @@ #define MAX_MATCH_GROUPS 256 /* Max # of groups for Match. */ #define MAX_AUTHKEYS_FILES 256 /* Max # of authorized_keys files. */ #define MAX_AUTH_METHODS 256 /* Max # of AuthenticationMethods. */ +#define MAX_DISPLAYS 1000 /* Maximum number of fake X11 displays to try. */ /* permit_root_login */ #define PERMIT_NOT_SET -1 @@ -154,6 +155,7 @@ int max_startups; int max_auth...

Hi, Is there any way to store HostKey in hardware (and delegate the related processing)? I have been using Roumen Petrov's x509 patch for clients, which works via an OpenSSL engine, but it does not seem to support server HostKey: http://roumenpetrov.info/pipermail/ssh_x509_roumenpetrov.info/2012q4/000019.html For PKCS#11, I have found an email on this list from a year back suggesting this