Include /etc/ssh/sshd_config.d/*.conf Port 25422 AcceptEnv LANG LC_* LoginGraceTime 30 MaxStartups 5 PermitRootLogin prohibit-password StreamLocalBindUnlink yes Subsystem sftp internal-sftp X11Forwarding no Match Group "System Admins" AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys AuthorizedKeysCommandUser root AuthenticationMethods "publickey" # ,password"