HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

KeyRegenerationInterval
Use this directive to specify the time interval after which the ephemeral server key is automatically
regenerated. If the value is 0, the key is never regenerated.
The default is 3600 (seconds).
For example:
KeyRegenerationInterval 1h
NOTE: This directive is applicable for the protocol version 1 only.
ListenAddress
Use this directive to specify the local addresses that the sshd daemon listens on. You can set one
of the following values for this directive depending on the type of IP address (IPv4 or IPv6) the
system uses:
• host IPv4_addr IPv6_addr
• host IPv4_addr:port
• [host IPv6_addr]:port
If a port is not specified, the sshd daemon listens on the specified address and all prior specified
port options. You can specify multiple ListenAddress options. Port directives must precede
ListenAddress directives for non-port-qualified addresses.
The default setting is 0.0.0.0 (listen on all local addresses).
For example:
ListenAddress 0.0.0.0
LoginGraceTime
Use this directive to specify the period of time that sshd waits for users to log in. The server daemon
disconnects after this period of time elapses. If LoginGraceTime is set to 0, there is no time limit
for users to log in. The time is set in seconds.
The default setting is 120 seconds.
For example:
LoginGraceTime 120
LogLevel
Use this directive to specify the verbosity level for sshd log messages. For more information on
the LogLevel directive, see “Generating Debug Messages Using the LogLevel Configuration
Directive” (page 60).
MACs
Use this directive to specify the available Message Authentication Code (MAC) algorithms. The
MACs directive is used by SSH-2 for data integrity protection. Multiple algorithms must be comma
separated.
The default setting is as follows:
hmac-md5, hmac-sha1, [e-mail], hmac-ripemd160, hmac-sha1-96, hmac-md5-96,
hmac-sha2-256, hmac-sha256-96, hmac-sha2-512, hmac-sha2-512-96.
For example:
MACs hmac-md5,hmac-sha1
Match
Use this directive to specify configuration options based on user, group, hostname, or address.
This directive overrides the global option in the sshd_config file. The arguments to Match are
one or more criteria-pattern pairs. The available criteria are User, Group, Host, and Address. The
Server Configuration Directives 73