3

I have a server running openSUSE which uses PAM config files for authentication/lockout/password policy etc. I now need to limit the allowed list of SSH ciphers. Normally I'd just do this in the sshd_config file.

However, if PAM is enabled will the ciphers I list in sshd_config be ignored or used in addition to PAM? Or should I be settings these in the /etc/pam.d/sshd config?

2

However, if PAM is enabled will the ciphers I list in sshd_config be ignored or used in addition to PAM? Or should I be settings these in the /etc/pam.d/sshd config?

In /etc/pam.d/sshd you don't specify any ciphers. It is used for the management of user sessions and login. The ciphers specified in sshd_config will be used regardless PAM.

  • Thank you very much. I thought this would be the case but I couldn't find solid confirmation of this online. Appreciate it. – popcornuk Feb 13 '17 at 23:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.