module ietf-ssh-server {

    yang-version 1.1;

    namespace
      "urn:ietf:params:xml:ns:yang:ietf-ssh-server";

    prefix sshs;

    import ietf-yang-types {
      prefix yang;
      reference
        "RFC 6991: Common YANG Data Types";


    }
    import iana-crypt-hash {
      prefix ianach;
      reference
        "RFC 7317: A YANG Data Model for System Management";


    }
    import ietf-netconf-acm {
      prefix nacm;
      reference
        "RFC 8341: Network Configuration Access Control Model";


    }
    import ietf-crypto-types {
      prefix ct;
      reference
        "RFC 9640: YANG Data Types and Groupings for Cryptography";


    }
    import ietf-truststore {
      prefix ts;
      reference
        "RFC 9641: A YANG Data Model for a Truststore";


    }
    import ietf-keystore {
      prefix ks;
      reference
        "RFC 9642: A YANG Data Model for a Keystore";


    }
    import ietf-ssh-common {
      prefix sshcmn;
      reference
        "RFC 9644: YANG Groupings for SSH Clients and SSH Servers";


    }

    organization
      "IETF NETCONF (Network Configuration) Working Group";

    contact
      "WG Web:   https://datatracker.ietf.org/wg/netconf
     WG List:  NETCONF WG list <mailto:netconf@ietf.org>
     Author:   Kent Watsen <mailto:kent+ietf@watsen.net>";

    description
      "This module defines a reusable grouping for SSH servers that
     can be used as a basis for specific SSH server instances.

     The key words 'MUST', 'MUST NOT', 'REQUIRED', 'SHALL',
     'SHALL NOT', 'SHOULD', 'SHOULD NOT', 'RECOMMENDED',
     'NOT RECOMMENDED', 'MAY', and 'OPTIONAL' in this document
     are to be interpreted as described in BCP 14 (RFC 2119)
     (RFC 8174) when, and only when, they appear in all
     capitals, as shown here.

     Copyright (c) 2024 IETF Trust and the persons identified
     as authors of the code.  All rights reserved.

     Redistribution and use in source and binary forms, with
     or without modification, is permitted pursuant to, and
     subject to the license terms contained in, the Revised
     BSD License set forth in Section 4.c of the IETF Trust's
     Legal Provisions Relating to IETF Documents
     (https://trustee.ietf.org/license-info).

     This version of this YANG module is part of RFC 9644
     (https://www.rfc-editor.org/info/rfc9644); see the RFC
     itself for full legal notices.";

    revision "2024-10-10" {
      description "Initial version.";
      reference
        "RFC 9644: YANG Groupings for SSH Clients and SSH Servers";

    }


    feature ssh-server-keepalives {
      description
        "SSH keepalive parameters are configurable for
       SSH servers on the server implementing this feature.";
    }

    feature local-users-supported {
      description
        "Indicates that the configuration for users can be
       configured herein, as opposed to in an application-
       specific location.";
    }

    feature local-user-auth-publickey {
      if-feature local-users-supported;
      description
        "Indicates that the 'publickey' authentication type,
       per RFC 4252, is supported for locally defined users.
       The 'publickey' authentication type is required by
       RFC 4252, but common implementations allow it to
       be disabled.";
      reference
        "RFC 4252:
         The Secure Shell (SSH) Authentication Protocol";

    }

    feature local-user-auth-password {
      if-feature local-users-supported;
      description
        "Indicates that the 'password' authentication type,
       per RFC 4252, is supported for locally defined users.";
      reference
        "RFC 4252:
         The Secure Shell (SSH) Authentication Protocol";

    }

    feature local-user-auth-hostbased {
      if-feature local-users-supported;
      description
        "Indicates that the 'hostbased' authentication type,
       per RFC 4252, is supported for locally defined users.";
      reference
        "RFC 4252:
         The Secure Shell (SSH) Authentication Protocol";

    }

    feature local-user-auth-none {
      if-feature local-users-supported;
      description
        "Indicates that the 'none' authentication type, per
       RFC 4252, is supported.  It is NOT RECOMMENDED to
       enable this feature.";
      reference
        "RFC 4252:
         The Secure Shell (SSH) Authentication Protocol";

    }
  }  // module ietf-ssh-server