Allowfrozensystemuser - HP NonStop SSH 544701-014 Reference Manual

both this global list and the SSH user's attribute ALLOWED-SUBSYSTEMS, then the incoming subsystem request will
be denied.
Parameter Syntax
ALLOWEDSUBSYSTEMS subsystem[,subsystem,...]
Double quotes are required when setting the parameter via PARAM and more than one subsystem is listed:
PARAM ALLOWEDSUBSYSTEMS "sftp,tacl"
Arguments
subsystem
Specifies an SSH subsystem to be allowed for incoming connections. Valid values are...
tacl
o
sftp
o
Default
If omitted, ALLOWEDSUBSYSTEMS will be set to "sftp,tacl".
Considerations
•
In an environment with more than one SSH2 process accessing the same SSHCTL database this parameter can
be used to force users to use one SSH2 process for SFTP sessions and the other SSH2 process for TACL
sessions.
•
Although shell/exec requests are not subsystem requests, the parameter ALLOWEDSUBSYSTEMS can be
used to generally prevent a user from starting a TACL: If parameter ALLOWEDSUBSYSTEM does not
include subsystem tacl, then any request for a TACL is prevented even when ALLOW-CI is set to TRUE.
If in this case CI-PROGRAM is configured as "*MENU* ..." or "telnet ...", i.e. a TACL is not directly started,
then the telnet service menu or the telnet forwarding is processed as configured.
Example
ALLOWEDSUBSYSTEMS sftp

ALLOWFROZENSYSTEMUSER

This parameter controls the behavior when SSH2 detects that the configured SYSTEM-USER of the ssh user is in state
FROZEN in Safeguard.
Parameter Syntax
ALLOWFROZENSYSTEMUSER [TRUE|FALSE]
Arguments
[TRUE|FALSE]
Specifies whether Safeguard users in state frozen are allowed to access the NonStop. Valid values are:
TRUE: A frozen user is not rejected, i.e. can authenticate via configured authentication methods.
o
FALSE: Authentication fails without trying any of the configured authentication methods if a Safeguard
o
user is in state FROZEN.
Default
If omitted, ALLOWFROZENSYSTEMUSER will be set to FALSE. This is a change compared to releases prior to 0089
as frozen users were allowed before version 0089.
Considerations
54 • Configuring and Running SSH2
HP NonStop SSH Reference Manual