#	$OpenBSD: ssh_config,v 1.34 2019/02/04 02:39:42 dtucker Exp $

# This is the ssh client system-wide configuration file.  See
# ssh_config(5) for more information.  This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.

# Configuration data is parsed as follows:
#  1. command line options
#  2. user-specific file
#  3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.


####
####  HPCMP Settings, 20200717 VRS
####

####   For pubkey authentication with CAC, try
#   Host somewhere.hpc.mil
#       pkcs11provider  /usr/local/lib/libcackey.so
#       IdentityFile    /dev/null
####

Host *
	ForwardX11                  yes
	ForwardX11Trusted           yes
	GSSAPIDelegateCredentials   yes
##	GSSAPIKeyExchange           yes
##	GSSAPIRenewalForcesRekey    yes
##	GSSAPITrustDNS              no
### PreferredAuthentications    ...,gssapi-keyex,
	KexAlgorithms               +diffie-hellman-group1-sha1
	PreferredAuthentications    gssapi-with-mic,publickey,hostbased,keyboard-interactive,password
	Protocol                    2
	ServerAliveInterval         300
	UMask                       037
	NoneEnabled                 yes
	TcpRcvBufPoll               yes

####   To see current effective config settings, use
####       ssh -G `hostname`;    sshd -T;
####   To see current built-in defaults (or other settings with alternate config file), use
####       ssh -G `hostname` -F /dev/null;    sshd -T -f /dev/null;
####

####
#### End Of HPCMP Settings
####

