Server Configuration Files

Reflection for Secure IT server configuration files contain configuration settings for the sshd server. The default global configuration file is /etc/ssh2/sshd2_config. You can specify an alternate file using the -f option on the sshd command line. You can also create and use optional subconfiguration files for specific client hosts or users.

A sample configuration file is installed to /etc/ssh2/sshd2_config. This file includes commented lines that show all available settings and their default values. A duplicate copy of this file is installed to /etc/ssh2/sshd2_config.example.

The basic format of the server configuration file is the same as the client configuration file. For details, see Configuration File Format.

Changes you make to the main server configuration file affect new connections immediately; you do not need to restart the server. Existing connections remain active using their original settings; subsequent connections use the new settings.

NOTE:Changes to Port, ListenAddress and FipsMode require a restart.

The server processes settings cumulatively in the following order. If a setting is configured in more than one place, the last value processed overrides any previous value of the same setting.

  1. The global configuration file, or an alternate file specified on the sshd command line using -f.

  2. Any host-specific subconfiguration file(s) that you have created and identified using the HostSpecificConfig keyword.

  3. Any user-specific subconfiguration file(s) that you have created and identified using the UserSpecificConfig keyword.

  4. Command line options used with sshd.