Stricthostkeychecking; Subnet - HP NonStop SSH 544701-014 Reference Manual

STOREDPASSWORDSONLY [TRUE|FALSE]
Arguments
[TRUE|FALSE]
Specifies whether password prompt is suppressed or not. Following are the possible arguments:
TRUE: Password prompt is suppressed. If the password cannot be found in the SSHCTL database, then the
o
password authentication will fail.
FALSE: Users will be prompted for the password if that was not found in the SSHCTL database.
o
Default
The default is FALSE. The default behavior is therefore the same as before this parameter was introduced.
Considerations
•
This parameter is only relevant for outgoing connections, i.e. with ssh clients SSH[OSSS] and SFTP[OSS]
running on a NonStop server.
•
In a scenario of ssh clients running in batch mode where password authentication is a requirement the password
prompt does not make sense.

STRICTHOSTKEYCHECKING

This option controls whether to restrict client access to remote systems to only those cases in which the host's public key
is explicitly configured as a KNOWNHOST entity in the SSHCTL.
Parameter Syntax
STRICTHOSTKEYCHECKING [TRUE|FALSE]
Arguments
[TRUE|FALSE]
Specifies whether host key of remote hosts must be preconfigured in SSHCTL. Following are the possible
arguments:
TRUE: Access to unknown hosts will be denied.
o
FALSE: Users will be prompted if they want to continue a connection to an unknown host and add the
o
host's public key as a KNOWNHOST entity to the SSHCTL.
Considerations
•
KNOWNHOST entities can be configured using SSHCOM.
Default
If this option is omitted, SSH2 will use a value of TRUE.
Example
STRICTHOSTKEYCHECKING FALSE

SUBNET

Use this parameter to specify the TCP/IP process a SSH2 process should listen on for incoming connections.
Parameter Syntax
SUBNET tcpip-process-name
108 • Configuring and Running SSH2
HP NonStop SSH Reference Manual