Works On

Viewing:

Red Hat Enterprise Linux 9 (Plow)

Same on:

CentOS Stream 9

Other versions:

Details

Size: 22 lines
MD5: 902612639e7f082be7fddea175d17221
SHA256: ceebc4775844077d58f4148f36eceeaea12c0e51cd5d14efcde8c703d32c66eb

/etc/ssh/sshd_config.d/50-redhat.conf

# This system is following system-wide crypto policy. The changes to
# crypto properties (Ciphers, MACs, ...) will not have any effect in
# this or following included files. To override some configuration option,
# write it before this block or include it before this file.
# Please, see manual pages for update-crypto-policies(8) and sshd_config(5).
Include /etc/crypto-policies/back-ends/opensshserver.config

SyslogFacility AUTHPRIV

ChallengeResponseAuthentication no

GSSAPIAuthentication yes
GSSAPICleanupCredentials no

UsePAM yes

X11Forwarding yes

# It is recommended to use pam_motd in /etc/pam.d/sshd instead of PrintMotd,
# as it is more configurable and versatile than the built-in version.
PrintMotd no

Copy & Paste

curl:

curl https://exampleconfig.com/api/v1/config/original/902612639e7f082be7fddea175d17221?hint=50-redhat.conf

wget:

wget -O 50-redhat.conf https://exampleconfig.com/api/v1/config/original/902612639e7f082be7fddea175d17221?hint=50-redhat.conf

For AI Agents

<prompt><role>DevOps agent</role><source url='https://exampleconfig.com/api/v1/config/original/902612639e7f082be7fddea175d17221?hint=50-redhat.conf' /><config><app>OpenSSH</app><os>Red Hat Enterprise Linux 9 (Plow)</os><location>/etc/ssh/sshd_config.d/50-redhat.conf</location><lines>22</lines><md5>902612639e7f082be7fddea175d17221</md5><sha256>ceebc4775844077d58f4148f36eceeaea12c0e51cd5d14efcde8c703d32c66eb</sha256></config></prompt>

Paste into Claude, ChatGPT, or any AI assistant.

Install OpenSSH

Alpine Linux

sudo apk add openssh-server

Debian

sudo apt update && sudo apt install openssh-server

Red Hat Enterprise Linux

sudo yum install openssh-server

Ubuntu

sudo apt update && sudo apt install openssh-server

File Location

File Path

/etc/ssh/sshd_config.d/50-redhat.conf

FAQ

When should I use this 50-redhat.conf?

Use it to restore a missing default, confirm what shipped, or diff against your current OpenSSH config.

How do I restore OpenSSH defaults?

Download the file, back up the current one in /etc/ssh/sshd_config.d/50-redhat.conf, replace it, then reload or restart OpenSSH.

Is 50-redhat.conf safe for production?

It is the vendor default for Red Hat Enterprise Linux 9 (Plow). Treat it as a baseline and review security and performance settings before production use.

How does this differ from other OS versions?

Defaults vary by distro and version. This copy matches Red Hat Enterprise Linux 9 (Plow).

Can I use this for OpenSSH troubleshooting?

Yes. Diff it against yours to find drift, then restore only the sections you need.

OpenSSH /etc/ssh/sshd_config.d/50-redhat.conf