Configuring An Ssh User - H3C S9500E Series Security Configuration Manual

When inputting or copying the content of the public key, be sure that the content is in H3C public key
format, that is, you need to input or copy it exactly as it is displayed by the display public-key local
command. When interacting with non-H3C software, you can only configure a client public key by
importing it from a public key file.
Importing a client public key from a public key file
Follow these steps to import a public key from a public key file:
To do...
1. Enter system view
2. Import the public key from a
public key file
For more information about client side public key configuration and the relevant commands, see Public Key
in the Security Configuration Guide and Security Command Reference.

Configuring an SSH user

This configuration allows you to create an SSH user and specify the service type and
authentication mode.
Follow these steps to configure an SSH user and specify the service type and authentication mode:
To do...
1. Enter system view
2. Create an SSH user, and
specify the service type and
authentication mode
A user without an SSH account can still pass password authentication and log into the server through
•
Stelnet or SFTP, as long as the user can pass AAA authentication and the service type is SSH.
An SSH server supports up to 1024 SSH users.
•
The service type of an SSH user can be Stelnet (Secure Telnet) or SFTP (Secure FTP). For information about
•
Stelnet, see SSH2.0
Use the command...
system-view
public-key peer keyname
import sshkey filename
For Stelnet users
For all users or SFTP
users
overview. For information about SFTP, see
Use the command...
system-view
ssh user username service-
type stelnet authentication-
type { password | { any |
password-publickey |
publickey } assign publickey
keyname }
ssh user username service-
type { all | sftp }
authentication-type {
password | { any |
password-publickey |
publickey } assign publickey
keyname work-directory
directory-name }
SFTP overview.
125
Remarks
—
Required
Remarks
—
Required
Use either
command.