sshd_config: 2 versions?

[jmb]

When I do a find on this 11i system for sshd_config, there is a version in /opt/ssh/etc, and there is also one (slightly different) in /opt/ssh/src/ssh.

My ssh -V returns: OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f

Is this a normal ssh install? Manpages references the first location.

[Sridhar Bhaskarla]

Yes. It tells you that it supports both version 1.5 (termed as 1) and version 2. However depending on how the remote sshd is configured, it will use that protocol.

ssh client picks this up from ssh_config if not overwritten in the command by the user. sshd picks it up from sshd_config file.

-Sri

[jmb]

So can I safely remove version 1.5? Is there a clean way to only support version 2?

[James A. Donovan · Accepted solution]

To support only version 2 protocol logins, edit your /opt/ssh/etc/sshd_config file. Change the line:

Protocol 2,1

to:

Protocol 2

Then restart your sshd daemon.


The sshd_config file located under /opt/ssh/src/ssh is simply a template/example.