Changes to system/etc/ssh/. All files

system/etc/ssh/sshd_config/nas

new file mode 100644@@ -0,0 +1,119 @@+# Include drop-in configurations+Include /etc/ssh/sshd_config.d/*.conf++# This is the sshd server system-wide configuration file.  See+# sshd_config(5) for more information.++# This sshd was compiled with PATH=/usr/local/sbin:/usr/local/bin:/usr/bin++# The strategy used for options in the default sshd_config shipped with+# OpenSSH is to specify options with their default value where+# possible, but leave them commented.  Uncommented options override the+# default value.++Port 7704+#AddressFamily any+#ListenAddress 0.0.0.0+#ListenAddress ::++#HostKey /etc/ssh/ssh_host_rsa_key+#HostKey /etc/ssh/ssh_host_ecdsa_key+#HostKey /etc/ssh/ssh_host_ed25519_key++# Ciphers and keying+#RekeyLimit default none++# Logging+#SyslogFacility AUTH+#LogLevel INFO++# Authentication:++#LoginGraceTime 2m+#PermitRootLogin prohibit-password+#StrictModes yes+MaxAuthTries 20+MaxSessions 1000++#PubkeyAuthentication yes++# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2+# but this is overridden so installations will only check .ssh/authorized_keys+AuthorizedKeysFile	.ssh/authorized_keys++#AuthorizedPrincipalsFile none++#AuthorizedKeysCommand none+#AuthorizedKeysCommandUser nobody++# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts+#HostbasedAuthentication no+# Change to yes if you don't trust ~/.ssh/known_hosts for+# HostbasedAuthentication+#IgnoreUserKnownHosts no+# Don't read the user's ~/.rhosts and ~/.shosts files+#IgnoreRhosts yes++# To disable tunneled clear text passwords, change to "no" here!+#PasswordAuthentication yes+#PermitEmptyPasswords no++# Change to "no" to disable keyboard-interactive authentication.  Depending on+# the system's configuration, this may involve passwords, challenge-response,+# one-time passwords or some combination of these and other methods.+#KbdInteractiveAuthentication yes++# Kerberos options+#KerberosAuthentication no+#KerberosOrLocalPasswd yes+#KerberosTicketCleanup yes+#KerberosGetAFSToken no++# GSSAPI options+#GSSAPIAuthentication no+#GSSAPICleanupCredentials yes++# Set this to 'yes' to enable PAM authentication, account processing,+# and session processing. If this is enabled, PAM authentication will+# be allowed through the KbdInteractiveAuthentication and+# PasswordAuthentication.  Depending on your PAM configuration,+# PAM authentication via KbdInteractiveAuthentication may bypass+# the setting of "PermitRootLogin prohibit-password".+# If you just want the PAM account and session checks to run without+# PAM authentication, then enable this but set PasswordAuthentication+# and KbdInteractiveAuthentication to 'no'.+#UsePAM no++#AllowAgentForwarding yes+#AllowTcpForwarding yes+#GatewayPorts no+X11Forwarding yes+#X11DisplayOffset 10+#X11UseLocalhost yes+#PermitTTY yes+#PrintMotd yes+#PrintLastLog yes+#TCPKeepAlive yes+#PermitUserEnvironment no+#Compression delayed+#ClientAliveInterval 0+#ClientAliveCountMax 3+#UseDNS no+#PidFile /run/sshd.pid+#MaxStartups 10:30:100+#PermitTunnel no+#ChrootDirectory none+#VersionAddendum none++# no default banner path+#Banner none++# override default of no subsystems+Subsystem	sftp	/usr/lib/ssh/sftp-server++# Example of overriding settings on a per-user basis+#Match User anoncvs+#	X11Forwarding no+#	AllowTcpForwarding no+#	PermitTTY no+#	ForceCommand cvs server

system/etc/ssh/sshd_config/nas2

deleted file mode 100644@@ -1,119 +0,0 @@-# Include drop-in configurations-Include /etc/ssh/sshd_config.d/*.conf--# This is the sshd server system-wide configuration file.  See-# sshd_config(5) for more information.--# This sshd was compiled with PATH=/usr/local/sbin:/usr/local/bin:/usr/bin--# The strategy used for options in the default sshd_config shipped with-# OpenSSH is to specify options with their default value where-# possible, but leave them commented.  Uncommented options override the-# default value.--Port 7704-#AddressFamily any-#ListenAddress 0.0.0.0-#ListenAddress ::--#HostKey /etc/ssh/ssh_host_rsa_key-#HostKey /etc/ssh/ssh_host_ecdsa_key-#HostKey /etc/ssh/ssh_host_ed25519_key--# Ciphers and keying-#RekeyLimit default none--# Logging-#SyslogFacility AUTH-#LogLevel INFO--# Authentication:--#LoginGraceTime 2m-#PermitRootLogin prohibit-password-#StrictModes yes-MaxAuthTries 20-MaxSessions 1000--#PubkeyAuthentication yes--# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2-# but this is overridden so installations will only check .ssh/authorized_keys-AuthorizedKeysFile	.ssh/authorized_keys--#AuthorizedPrincipalsFile none--#AuthorizedKeysCommand none-#AuthorizedKeysCommandUser nobody--# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts-#HostbasedAuthentication no-# Change to yes if you don't trust ~/.ssh/known_hosts for-# HostbasedAuthentication-#IgnoreUserKnownHosts no-# Don't read the user's ~/.rhosts and ~/.shosts files-#IgnoreRhosts yes--# To disable tunneled clear text passwords, change to "no" here!-#PasswordAuthentication yes-#PermitEmptyPasswords no--# Change to "no" to disable keyboard-interactive authentication.  Depending on-# the system's configuration, this may involve passwords, challenge-response,-# one-time passwords or some combination of these and other methods.-#KbdInteractiveAuthentication yes--# Kerberos options-#KerberosAuthentication no-#KerberosOrLocalPasswd yes-#KerberosTicketCleanup yes-#KerberosGetAFSToken no--# GSSAPI options-#GSSAPIAuthentication no-#GSSAPICleanupCredentials yes--# Set this to 'yes' to enable PAM authentication, account processing,-# and session processing. If this is enabled, PAM authentication will-# be allowed through the KbdInteractiveAuthentication and-# PasswordAuthentication.  Depending on your PAM configuration,-# PAM authentication via KbdInteractiveAuthentication may bypass-# the setting of "PermitRootLogin prohibit-password".-# If you just want the PAM account and session checks to run without-# PAM authentication, then enable this but set PasswordAuthentication-# and KbdInteractiveAuthentication to 'no'.-#UsePAM no--#AllowAgentForwarding yes-#AllowTcpForwarding yes-#GatewayPorts no-X11Forwarding yes-#X11DisplayOffset 10-#X11UseLocalhost yes-#PermitTTY yes-#PrintMotd yes-#PrintLastLog yes-#TCPKeepAlive yes-#PermitUserEnvironment no-#Compression delayed-#ClientAliveInterval 0-#ClientAliveCountMax 3-#UseDNS no-#PidFile /run/sshd.pid-#MaxStartups 10:30:100-#PermitTunnel no-#ChrootDirectory none-#VersionAddendum none--# no default banner path-#Banner none--# override default of no subsystems-Subsystem	sftp	/usr/lib/ssh/sftp-server--# Example of overriding settings on a per-user basis-#Match User anoncvs-#	X11Forwarding no-#	AllowTcpForwarding no-#	PermitTTY no-#	ForceCommand cvs server