HP NonStop SSH 544701-014, Справочное руководство

Страница: 108 / 344

108
•
Configuring and Running SSH2 HP NonStop SSH Reference Manual
STOREDPASSWORDSONLY [ TRUE | FALSE ]
Arguments
[ TRUE | FALSE ]
Specifies whether password prompt is suppressed or not. Following are the possible arguments:
o
TRUE: Password prompt is suppressed. If the password cannot be found in the SSHCTL database, then the
password authentication will fail.
o
FALSE: Users will be prompted for the password if that was not found in the SSHCTL database.
Default
The default is FALSE. The default behavior is therefore the same as before this parameter was introduced.
Considerations
•
This parameter is only relevant for outgoing connections, i.e. with ssh clients SSH[OSSS] and SFTP[OSS]
running on a NonStop server.
•
In a scenario of ssh clients running in batch mode where password authentication is a requirement the password
prompt does not make sense.
STRICTHOSTKEYCHECKING
This option controls whether to restrict client access to remote systems to only those cases in which the host’s public key
is explicitly configured as a KNOWNHOST entity in the SSHCTL.
Parameter Syntax
STRICTHOSTKEYCHECKING [ TRUE|FALSE ]
Arguments
[ TRUE|FALSE ]
Specifies whether host key of remote hosts must be preconfigured in SSHCTL. Following are the possible
arguments:
o TRUE: Access to unknown hosts will be denied.
o
FALSE: Users will be prompted if they want to continue a connection to an unknown host and add the
host's public key as a KNOWNHOST entity to the SSHCTL.
Considerations
•
KNOWNHOST entities can be configured using SSHCOM.
Default
If this option is omitted, SSH2 will use a value of TRUE.
Example
STRICTHOSTKEYCHECKING FALSE
SUBNET
Use this parameter to specify the TCP/IP process a SSH2 process should listen on for incoming connections.
Parameter Syntax
SUBNET tcpip-process-name