HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

MaxSessions 20
MaxStartups
Use this directive to specify the maximum number of concurrent unauthenticated connections to the
sshd daemon. Additional connections are refused until authentication succeeds or the
LoginGraceTime expires.
The default setting is 10.
For example:
MaxStartups 10
PasswordAuthAllowUsers
This configuration directive has been introduced by the 3rd party Auth Selection patch. Use this
configuration directive to specify which users can authenticate using password authentication.
The default setting is to allow all users.
For example:
PasswordAuthAllowUsers Allow All
PasswordAuthDenyUsers
This configuration directive has been introduced by the 3rd party Auth Selection patch. Use this
configuration directive to specify which users cannot authenticate using password authentication.
The default setting is to deny no users.
For example:
PasswordAuthDenyUsers Deny none
PasswordAuthentication
Use this directive to specify whether a password must be accepted as proof of identity at login. If
KerberosAuthentication is disabled, the login password is sufficient. If
KerberosAuthentication is also enabled, the Kerberos server password is accepted as a
proof of identity.
The default setting is yes.
For example:
PasswordAuthentication yes
PermitEmptyPasswords
Use this directive to specify whether the server allows users to login to accounts with empty password
strings. Use this directive when password-based authentication is used.
The default setting is no.
For example:
PermitEmptyPasswords no
PermitOpen
Use this directive to specify the destinations to which TCP port forwarding is permitted. Use one
of the following formats:
PermitOpen host:port
PermitOpen IPv4_addr:port
PermitOpen [IPv6_addr]:port
Multiple forwards can be specified by separating them with whitespace. An argument of any can
be used to remove all restrictions and permit any forwarding requests. All port forwarding requests
by default, are permitted.
Server Configuration Directives 75