Port 22

{% if ssh_ldap %}
AuthorizedKeysCommand /usr/lib/openssh-ldap-helper/openssh-ldap-helper
AuthorizedKeysCommandUser root
{% else %}
AuthorizedKeysFile	.ssh/authorized_keys
{% endif %}

PasswordAuthentication no
ChallengeResponseAuthentication no

UsePAM yes

PrintMotd no
UsePrivilegeSeparation sandbox
Subsystem	sftp	/usr/lib/ssh/sftp-server