#! /bin/sh
# tweak_sshd (Bourne shell script) -- 

set -e

if [ ! -f /etc/ssh/sshd_config.dist ] ; then
  cp -p /etc/ssh/sshd_config /etc/ssh/sshd_config.dist
fi
sed -i -e 's/^GSSAPIAuthentication yes/## &/'  \
       -e "s/^PermitRootLogin .*/PermitRootLogin without-password/"  \
  /etc/ssh/sshd_config

if [ -f /usr/lib/systemd/system/sshd.service ] ; then
  systemctl reload sshd
else
  service sshd reload
fi