mediumaccess-controlverified ✓rollback-safe
Ensure sshd GSSAPIAuthentication is disabled
ssh-disable-gssapi · RHEL ≥ 8 · 2 impls
Description
The sshd GSSAPIAuthentication directive must be properly configured.
Rationale
Improper SSH GSSAPIAuthentication configuration could weaken the security of remote access to the system.
Check → Remediate
Checksshd_effective_config
- key:
- gssapiauthentication
- expected:
- no
Remediateconfig_set
- path:
- /etc/ssh/sshd_config
- key:
- GSSAPIAuthentication
- value:
- no
- separator:
- reload:
- sshd
Framework references
CIS
rhel9 5.1.11rhel10 5.1.9rhel8 5.1.11
STIG
V-281254 / RHEL-10-700510V-244528 / RHEL-08-010522V-258003 / RHEL-09-255135
NIST 800-53
AC-17SC-8CM-6IA-2
Live verification
rhel10:checkrhel8:checkrhel9:check
#ssh#sshd#access-control