Configuration of the /etc/pam.d/ssh file

Securing and Optimizing Linux: RedHat Edition -A Hands on Guide
Prev | Chapter 16. Software -Securties(commercial) | Next

# 16.6. Configuration of the `/etc/pam.d/ssh` file

For better security of your ssh2 server, you can configure it to use pam authentication. To do that, you must create the `/etc/pam.d/ssh` file.

Create the ssh file touch `/etc/pam.d/ssh` and add or change, if necessary:

             #%PAM-1.0
             auth	        required     /lib/security/pam_pwdb.so shadow
             auth	        required     /lib/security/pam_nologin.so
             account	required     /lib/security/pam_pwdb.so
             password	required     /lib/security/pam_cracklib.so
             password	required     /lib/security/pam_pwdb.so use_authtok nullok md5 shadow
             session	required     /lib/security/pam_pwdb.so

For Further documentation and more details, there are several man pages you can read:

ssh-add2(1)

  - adds identities for the authentication agent

ssh-agent2(1)

  - authentication agent

ssh-keygen2(1)

  - authentication key pair generation

ssh2(1)

  - secure shell client remote login program

sshd2(8)

  - secure shell daemon

Prev | Home | Next
Configure sshd2 to use tcp-wrappers/inetd super server | Up | Ssh2 Per-User Configuration