HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

match patterns can consist of single entries or comma-separated lists, and can use the wildcard

and negation operators.

The patterns in an Address criteria can additionally contain addresses to match in CIDR address

or masklen format, for example: 192.0.2.0/24 or 3ffe:ffff::/32.

The following keywords can be used on the lines following a Match keyword:

• AllowAgentForwarding

• AllowTcpForwarding

• Banner

• ChrootDirectory

• ForceCommand

• GatewayPorts

• GSSApiAuthentication

• HostbasedAuthentication

• KbdInteractiveAuthentication

• KerberosAuthentication

• MaxAuthTries

• MaxSessions

• PasswordAuthentication

• PermitEmptyPasswords

• PermitOpen

• PermitRootLogin

• PubkeyAuthentication

• RhostsRSAAuthentication

• RSAAuthentication

• X11DisplayOffset

• X11Forwarding

• X11UseLocalHost

For example:

MatchUser xxxx X11DisplayOffset 20

In the above configuration, the criteria User is given as the argument for Match. The

X11DisplayOffset option is set below it. This directive overrides the global section of the

sshd_config file for User xxxx.

MaxAuthTries

Use this directive to specify the maximum number of authentication attempts that are permitted per

connection.

The default value is 6.

For example:

MaxAuthTries 6

MaxSessions

Use this directive to specify the maximum number of open sessions that are permitted per network

connection.

The default is 10.

For example:

74 Configuration Files and Directives