vi • Contents HP NonStop SSH Reference Manual
Enabling Full TTY Access .................................................................................................... 112
Enabling 6530 Terminal Access ............................................................................................ 112
Configuring an Alternate Command Interpreter ...................................................... 112
Configuring a Service Menu.................................................................................... 113
Configuring an STN Service or Window ................................................................ 113
Forcing TACL Access via Server-side Configuration ............................................. 114
Using TELSERV as Service Provider ..................................................................... 114
Granting Access without SSH Authentication ....................................................................... 115
Single Sign-on with GSSAPI Authentication ........................................................................ 116
Overview ................................................................................................................. 116
Prerequisites ............................................................................................................ 116
Configuration of the GSSAPI Interface Process...................................................... 116
Enabling GSSAPI Authentication for a User Account ............................................ 116
Authorizing Kerberos Principals for Logon ............................................................ 117
Restricting Incoming and Outgoing Connections .................................................................. 118
Rejecting Gateway Ports ......................................................................................... 118
Restricting External Access to SSH2 Process ......................................................... 118
Restricting Internal Access to Remote SSH2 Hosts ................................................ 118
Restricting Local Ports used for Port Forwarding ................................................... 119
Restricting Remote Hosts/Ports for Port Forwarding .............................................. 119
Restricting access to forwarding tunnels ................................................................. 119
Load Balancing ...................................................................................................................... 119
Load-Balancing Outbound SSH Sessions ............................................................... 119
Load-Balancing Inbound SSH Sessions .................................................................. 120
Fault Tolerance ...................................................................................................................... 120
Configuring SSH2 as a NonStop Process Pair......................................................... 120
Configuring SSH2 as a Generic Process ................................................................. 121
Choosing a Persistence Mechanism ........................................................................ 121
Processing of DEFINEs ......................................................................................................... 122
Setting of Environment Variables .......................................................................................... 122
TCP/IPv6 Configuration ........................................................................................................ 123
IPv6 Address Formats ............................................................................................. 123
Usage of IPv6 Addresses ......................................................................................... 124
IP Mode ................................................................................................................... 125
TCP/IPv6 Migration and Backout ......................................................................................... 125
Start Using TCP/IPv6 .............................................................................................. 125
Reverting Back to Pre-IPv6 SSH2 Release ............................................................. 125
The SSH User Database 127
Overview of SSH Operation Modes ...................................................................................... 127
Database for Daemon Mode .................................................................................................. 128
Database for Client Mode ...................................................................................................... 130
Creating and Accessing the Database .................................................................................... 131
Exporting the Database .......................................................................................................... 131
SSHCOM Command Reference 133
SSHCOM Overview .............................................................................................................. 133
Standard NonStop Commands and Features ........................................................... 134
Startup Values for the MODE and ASSUME USER Commands ........................... 135
Security within SSHCOM ....................................................................................... 135
Ownership and Management of Client Mode Entities ............................................. 137
Miscellaneous commands in SSHCOM ................................................................................. 139
MODE ..................................................................................................................... 139
SET .......................................................................................................................... 139
To Next Page
Loading...
