#!/usr/bin/perl -0p
# Debathena rules (from debathena-ssh-server-config)
s/^#?GSSAPIAuthentication .*$/GSSAPIAuthentication yes\nGSSAPIKeyExchange yes\nGSSAPIStrictAcceptorCheck no/m or die;
s/^#?GSSAPICleanupCredentials .*$/GSSAPICleanupCredentials yes/m or die;
s/^#?ChallengeResponseAuthentication .*$/ChallengeResponseAuthentication yes/m or die;
## In Debathena, privilege separation is configurable.
s/^#?UsePrivilegeSeparation .*$/UsePrivilegeSeparation yes/m or die;
s/^#?PasswordAuthentication .*$/PasswordAuthentication no/m or die;

# Invirt rules
s/^#?PrintLastLog .*$/PrintLastLog no/m or die;
s/$/\nAllowTcpForwarding no/ or die;
s/^#?X11Forwarding .*$/X11Forwarding no/m or die;
s/^#?Subsystem sftp.*$//m or die;