HP NonStop SSH 544701-014 User Manual

HP NonStop SSH Reference Manual SSHCOM Command Reference • 159
• NONE: shortcut for no operation
Operations can be abbreviated as long as the abbreviation is unambiguous.
Example:
• SFTP-SECURITY (WRITE,LIST)
o will only allow perusal of files and uploading of files
o can be abbreviated as SFTP-SECURITY (W,L)
SHELL-COMMAND
This attribute specifies a forced command that is to be executed rather than any command given by an exec request from
the SSH client. A forced command allows you to limit shell access to specific tasks or implement additional security
measures. SSH2 will retain commands given in the user's exec request, in the SSH_ORIGINAL_COMMAND
environment variable, to allow a shell script to analyze and/or execute the original command.
SHELL-ENVIRONMENT
The full OSS file name of a shell script preparing the shell environment for non-login shells (which are started without
executing /etc/profile or ~/.profile). The value will be used to set environment variable ENV (see man pages of ksh for
information on how the shell processes ENV). The attribute value (shell script) can contain absolute paths but also pre-
defined values like $HOME or ~.
SHELL-PROGRAM
This attribute specifies the path to the shell program to be used to start a shell or execute a command. Specify
*DEFAULT* or SHELL-PROGRAM without argument to make SSH2 use the default initial program configured for the
assigned SYSTEM-USER (e.g. by the INITIAL-PROGRAM attribute of a SAFEGUARD user).
If *MENU* is specified, the non-6530 session will be connected to a service menu provided by the STN PTYSERVER.
This resembles the functionality of TELSERV, providing dynamic services, as well as services connecting to static
windows. The services offered by the STN PTYSERVER process can be configured using STNCOM.
If *MENU* is followed by a service or window name, the corresponding service or window is automatically selected. If
the service or window does not exist, the STN menu will be displayed.
If the option FORCE is appended, then the user is forced to use the pre-configured STN service or window. In this case
the user will not see the STN menu, even when the configured service or window does not exist.
SYSTEM-USER
This attribute defines the Guardian user name to which the <user-name> is mapped.
If this attribute is omitted, it is assumed that <user-name> is a valid user on the system. I.e. the <user-name> value is
used for attribute SYSTEM-USER in this case.
If *NONE* is specified, the user is not mapped to a system user, causing all channel requests that require a valid system
user (e.g. exec, subsystem SFTP) to be rejected. SYSTEM-USER *NONE* is useful to grant anonymous access to
services which perform their own authentication (e.g. Pathway applications). When SYSTEM-USER *NONE* is used
and CI-PROGRAM or SHELL-PROGRAM are *MENU* and TACL or OSH can be selected from the STN menu, then
a logon for TACL or OSS is required.
It is possible to specify the logon id (e.g. 11,23) in double quotes. The logon id will be converted to <group>.<user>
before the value for SYSTEM-USER is set.
DELETE USER
The DELETE USER command deletes a user from the database and has the following syntax:
DELETE USER <user-name>

HP NonStop SSH 544701-014 Specifications

General

Brand	HP
Model	NonStop SSH 544701-014
Category	Software
Language	English