--- distrib/sshd_config	2016-04-26 11:02:10.000000000 +0200
+++ modif/sshd_config	2016-05-25 09:31:47.115945056 +0200
@@ -91,7 +91,11 @@
 # Change to no to disable s/key passwords
 ChallengeResponseAuthentication no
 PermitUserEnvironment no
+if %%tcpforwarding == "oui"
+AllowTcpForwarding yes
+%else
 AllowTcpForwarding no
+%end if
 ClientAliveInterval 30
 ClientAliveCountMax 10