HP NonStop SSH 544701-014, Reference Manual

Page: 50 / 344

50
•
Configuring and Running SSH2 HP NonStop SSH Reference Manual
SSH2 Parameter Reference
This section describes all available SSH2 parameters in alphabetical order. Note that parameter names are case
insensitive, regardless of the source in which they appear.
Some of the parameters are also valid for clients, please reference section "FILE I/O parameters for SFTP/SFTPOSS".
Parameter Overview
The following table lists all available SSH2 parameters and their meanings:
Parameter Meaning
ALLOWEDAUTHENTICATIONS Sets the list of allowed authentications for users automatically added to SSHCTL
ALLOWEDSUBSYSTEMS Sets the list of allowed subsystems which globally restricts the users' settings of
ALLOWED-SUBSYSTEMS attribute.
ALLOWFROZENSYSTEMUSER Controls whether ssh users with a frozen Safeguard user configured as
SYSTEM-USER are allowed to authenticate.
ALLOWINFOSSH2 Controls who is allowed to execute SSHCOM command INFO SSH2.
ALLOWPASSWORDSTORE Controls whether users are allowed to use stored passwords for connections to
remote SSH daemons.
ALLOWTCPFORWARDING Allows global configuration of TCP port forwarding.
AUDITCONSOLE Determines whether audit messages are written to the console.
AUDITEMS Determines whether audit messages are written to EMS.
AUDITFILE Determines whether audit messages are written to a file.
AUDITFILERETENTION Controls audit file rollover.
AUDITFORMAT Controls the format of the audit messages that are written.
AUDITFORMATCONSOLE Controls the format of the audit messages that are written to the console.
AUDITFORMATEMS Controls the format of the audit messages that are written to EMS.
AUDITFORMATFILE Controls the format of the audit messages that are written to a file.
AUDITMAXFILELENGTH Controls the maximum size of the audit file.
AUTOADDSYSTEMUSERS Controls whether remote users can log on via SSH using a Guardian user ID or
alias, without configuring them explicitly via SSHCOM in the SSHCTL.
AUTOADDSYSTEMUSERSLIKE Allows definition of a default user configuration when users are automatically
added to SSHCTL.
BACKUPCPU Specifies a backup CPU for running SSH2 as a NonStop process pair.
BANNER Configures an authentication banner message to be displayed to SSH clients
connecting to the SSH2 daemon.
CIPHERS Details the list of cipher suites that will be accepted.
CLIENTALLOWEDAUTHENTICATIONS Allows restriction of possible authentication methods used by NonStop ssh
clients
CLIENTMODEOWNERPOLICY Defines security granularity for client mode SSH2 database.
COMPRESSION Specifies whether compressed SSH sessions are supported.
CONFIG Specifies the file name of an SSH2 configuration file.
CONFIG2 Specifies the file name of a second configuration file for an SSH2 process.
CPUSET Specifies the default value for USER attribute CPU-SET.
CUSTOMER Allows setting the customer name or overwriting the customer name in the
license file.
DISCONNECTIFUSERUNKNOWN Controls the handling of unknown user names in incoming connections.