HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

NOTE: This directive is available for the SSH-2 protocol only.
HostbasedAuthAllowUsers
This configuration directive has been introduced by the 3rd party Auth Selection patch. Use this
configuration directive to specify which users can authenticate using host based authentication.
The default setting is to allow all users.
For example:
HostbasedAuthAllowUsers Allow All
HostbasedAuthDenyUsers
This configuration directive has been introduced by the 3rd party Auth Selection patch. Use this
configuration directive to specify which users cannot authenticate using host based authentication.
The default setting is to deny no users.
For example:
HostBasedAuthDenyUsers Deny None
HostbasedAuthentication
Use this directive to specify whether host-based authentication combined with successful public-key
authentication is enabled. This directive checks the /etc/ssh_known_hosts and $HOME/.ssh/
known_hosts files for a valid public key.
The default setting is no.
For example:
HostbasedAuthentication no
NOTE: This directive is available for the SSH-2 protocol only.
HostKey
Use this directive to specify the file that contains a private host key that is used by HP-UX Secure
Shell.
NOTE: The sshd daemon does not use a file if that file is accessible to all users or to a group
of users. Use the HostKey directive to specify multiple host key files. Use RSA1 keys if you are
using SSH-1, and ECDSA, DSA or RSA keys if you are using SSH-2.
The following examples display the default values of HostKey for the SSH-1 and SSH-2 protocols.
For example, using SSH-1:
HostKey /opt/ssh/etc/ssh_host_key
For example, using SSH-2:
HostKey /opt/ssh/etc/ssh_host_rsa_key
HostKey /opt/ssh/etc/ssh_host_dsa_key
HostKey /opt/ssh/etc/ssh_host_ecdsa_key
IgnoreRhosts
Use this directive to specify that HP-UX Secure Shell not to use the .rhosts and .shosts files
in RhostsRSAAuthentication and HostbasedAuthentication. With this directive set to
yes, HP-UX Secure Shell continues to use the /etc/hosts.equiv and /opt/ssh/etc/
shosts.equiv files.
The default value is yes.
For example:
IgnoreRhosts yes
70 Configuration Files and Directives