Works On

Viewing:

Red Hat Enterprise Linux 9 (Plow)

Same on:

CentOS Stream 9

Other versions:

Details

Size: 22 lines
MD5: 902612639e7f082be7fddea175d17221
SHA256: ceebc4775844077d58f4148f36eceeaea12c0e51cd5d14efcde8c703d32c66eb

Copy & Paste

curl:

curl https://exampleconfig.com/api/v1/config/original/902612639e7f082be7fddea175d17221?hint=50-redhat.conf

wget:

wget -O 50-redhat.conf https://exampleconfig.com/api/v1/config/original/902612639e7f082be7fddea175d17221?hint=50-redhat.conf

For AI Agents

You are a DevOps agent. Fetch the default OpenSSH config for Red Hat Enterprise Linux 9 (Plow) from https://exampleconfig.com/api/v1/config/original/902612639e7f082be7fddea175d17221?hint=50-redhat.conf. Compare with my current /etc/ssh/sshd_config.d/50-redhat.conf and summarize differences and safe changes.

Copy this prompt into Claude, ChatGPT, or other AI assistants.

/etc/ssh/sshd_config.d/50-redhat.conf

# This system is following system-wide crypto policy. The changes to
# crypto properties (Ciphers, MACs, ...) will not have any effect in
# this or following included files. To override some configuration option,
# write it before this block or include it before this file.
# Please, see manual pages for update-crypto-policies(8) and sshd_config(5).
Include /etc/crypto-policies/back-ends/opensshserver.config

SyslogFacility AUTHPRIV

ChallengeResponseAuthentication no

GSSAPIAuthentication yes
GSSAPICleanupCredentials no

UsePAM yes

X11Forwarding yes

# It is recommended to use pam_motd in /etc/pam.d/sshd instead of PrintMotd,
# as it is more configurable and versatile than the built-in version.
PrintMotd no

Install OpenSSH

Alpine Linux

sudo apk add openssh-server

Debian

sudo apt update && sudo apt install openssh-server

Red Hat Enterprise Linux

sudo yum install openssh-server

Ubuntu

sudo apt update && sudo apt install openssh-server

File Location

File Path

/etc/ssh/sshd_config.d/50-redhat.conf

FAQ

When should I use this 50-redhat.conf?

Restore it. Compare it. Start clean.

How do I restore OpenSSH defaults?

Download, replace, restart.

Is 50-redhat.conf safe for production?

Yes. This is exactly what shipped. Safe starting point.

How does this differ from other OS versions?

Defaults change. This one is specific to Red Hat Enterprise Linux 9 (Plow).

Can I use this for OpenSSH troubleshooting?

Absolutely. Diff this against yours to spot the problem.

OpenSSH /etc/ssh/sshd_config.d/50-redhat.conf