Allowedauthentications; Allowedsubsystems - HP NonStop SSH 544701-014 Reference Manual

Parameter
TCPIPRESOLVERNAME
USETEMPLATESYSTEMUSER

ALLOWEDAUTHENTICATIONS

Use this parameter to specify the authentication mechanisms that are allowed for system users that are automatically
added to the SSHCTL database upon first login.
Parameter Syntax
ALLOWEDAUTHENTICATIONS (method[,method,...])
Arguments
method
Specifies an SSH authentication method to be allowed. Valid values are...
password
o
Password for the NonStop system's authentication mechanism. The password is validated against the
SYSTEM-USER's password.
publickey
o
Public key authentication using the PUBLIC-KEYs configured for this user.
keyboard-interactive
o
Authentication according to RFC 4256 mapped to the standard GUARDIAN user authentication dialog
verifying the SYSTEM-USER's password.
gssapi-with-mic
o
GSSAPI user authentication in accordance with the RFC 4462 standard. Including this method will also
enable "gssapi-keyex" authentication, if the initial key exchange was performed over GSSAPI. See section
"Single Sign-on with GSSAPI
Default
If omitted, ALLOWEDAUTHENTICATIONS will be set to (keyboard-interactive,password,publickey).
Considerations
•
ALLOWEDAUTHENTICATIONS is only relevant if AUTOADDSYSTEMUSERS is set to TRUE.
•
ALLOWEDAUTHENTICATIONS will not override any list of authentication methods explicitly configured
for a user (using SSHCOM ADD USER or ALTER USER).
Example
ALLOWEDAUTHENTICATIONS (keyboard-interactive,publickey)
See also:
AUTOADDSYSTEMUSERS

ALLOWEDSUBSYSTEMS

This parameter can be used to globally restrict the SSH user settings to those subsystems listed in the value for
ALLOWEDSUBSYSTEMS, which is a comma separated list of subsystem names. If a subsystem is not mentioned in
HP NonStop SSH Reference Manual
Meaning
Same effect as DEFINE =TCPIP^RESOLVER^NAME.
Allows using the same (dummy) Guardian user or *NONE* for automatically
added users.
Authentication" for further details.
Configuring and Running SSH2 • 53