HP NonStop SSH 544701-014, Reference Manual

Page: 146 / 344

146
•
SSHCOM Command Reference HP NonStop SSH Reference Manual
Daemon Mode Commands - Overview
The SSH2 user base is maintained using the following commands. The commands will be discussed in details in the
following subsections. Please also see "Database for Daemon Mode" in chapter "The SSH User Database" for an
overview of the database content.
•
Commands operating on the USER entity:
o ADD USER: adds a new user to the database.
o
ALTER USER: changes parameters for an existing user.
o
DELETE USER: deletes an existing user.
o
FREEZE USER: freezes a user name, rendering it unable to log on from remote.
o
INFO USER: shows information about a user or a set of users.
o
RENAME USER: renames a user.
o
THAW USER: thaws a user name, making it active again.
•
Commands operating on the RESTRICTION-PROFILE entity:
o
ADD RESTRICTION-PROFILE: adds a new restriction profile to the database.
o ALTER RESTRICTION-PROFILE: changes parameters for an existing restriction profile.
o
DELETE RESTRICTION-PROFILE: deletes an existing restriction profile.
o
INFO RESTRICTION-PROFILE: shows information about a restriction profile or a set of restriction
profiles.
o
RENAME RESTRICTION-PROFILE: renames a restriction profile.
Daemon Mode Commands Operating on the USER
Entity
ADD USER
The ADD USER command adds a new user to the database and has the following syntax:
ADD USER <user-name>
[,ALLOW-CI yes|no ]
[,ALLOW-SHELL yes|no ]
[,ALLOW-PTY yes|no ]
[,ALLOW-TCP-FORWARDING yes|no ]
[,ALLOWED-AUTHENTICATIONS ( <method>, <method>, ... ) ]
[,ALLOWED-SUBSYSTEMS ( <subsystem>, <subsystem>, ... ) ]
[,ALLOW-GATEWAY-PORTS yes|no ]
[,ALLOW-MULTIPLE-REMOTE-HOSTS yes|no ]
[,CI-COMMAND [ <command> ] ]
[,CI-PROGRAM [ <filename> | *MENU* | *MENU* <service> [ FORCE ] ] ]
[,COMMENT <comment> | "<comment containing spaces>" ]
[,CPU-SET [<cpu> | <cpu-range> | ( <cpu-range-list> ) ] ]
[,FROZEN]
[,LIKE <existing-user-name>]
[,PRINCIPAL { <user>@<REALM> | *@<REALM> | *@* } ]
[,PRIORITY -1 | <priority> ]
[,PUBLICKEY <key-name> { FINGERPRINT <fingerprint-value> |
FILE <filename> } |
( { FINGERPRINT <fingerprint-value> |
FILE <filename> }
[, COMMENT "<comment>"]