Port AddressFamily ListenAddress Protocol HostKey AcceptEnv AllowAgentForwarding AllowGroups AllowStreamLocalForwarding AllowTcpForwarding AllowUsers AuthenticationMethods AuthorizedKeysCommand AuthorizedKeysCommandUser AuthorizedKeysFile AuthorizedPrincipalsCommand AuthorizedPrincipalsCommandUser AuthorizedPrincipalsFile Banner CASignatureAlgorithms ChallengeResponseAuthentication ChrootDirectory Ciphers ClientAliveCountMax ClientAliveInterval Compression DebianBanner DenyGroups DenyUsers DisableForwarding ExposeAuthInfo FingerprintHash ForceCommand GatewayPorts GSSAPIAuthentication GSSAPICleanupCredentials GSSAPIKeyExchange GSSAPIKexAlgorithms GSSAPIStoreCredentialsOnRekey GSSAPIStrictAcceptorCheck HPNBufferSize HPNDisabled HostCertificate HostKeyAgent HostKeyAlgorithms HostbasedAcceptedKeyTypes HostbasedAcceptedAlgorithms HostbasedAuthentication HostbasedUsesNameFromPacketOnly Include IPQoS IgnoreRhosts IgnoreUserKnownHosts KbdInteractiveAuthentication KerberosAuthentication KerberosGetAFSToken KerberosOrLocalPasswd KerberosTicketCleanup KerberosUniqueTicket KexAlgorithms KeyRegenerationInterval LogLevel LogVerbose LoginGraceTime MACs MaxAuthTries MaxSessions MaxStartups ModuliFile NoneEnabled PasswordAuthentication PermitEmptyPasswords PermitListen PermitOpen PermitRootLogin PermitTTY PermitTunnel PermitUserEnvironment PermitUserRC PerSourceMaxStartups PerSourceNetBlockSize PidFile PrintLastLog PrintMotd PubkeyAcceptedKeyTypes PubkeyAcceptedAlgorithms PubkeyAuthOptions PubkeyAuthentication RSAAuthentication RSAMinSize RekeyLimit RevokedKeys RDomain RhostsRSAAuthentication SecurityKeyProvider SetEnv ServerKeyBits StreamLocalBindMask StreamLocalBindUnlink StrictModes Subsystem SyslogFacility TCPKeepAlive TcpRcvBufPoll TrustedUserCAKeys UseDNS UseLogin UsePAM UsePrivilegeSeparation VersionAddendum X11DisplayOffset X11MaxDisplays X11Forwarding X11UseLocalhost XAuthLocation