HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

X11DisplayOffset
Use this directive to specify the first display number the sshd daemon must use for X11 forwarding.
This prevents the sshd daemon from crashing the X11 servers.
The default value is 10.
For example:
X11DisplayOffset 10
X11Forwarding
Use this directive to enable X11 forwarding. When you enable this directive, there is additional
exposure to the server, and the client displays whether the sshd proxy display is configured to
listen on the wildcard address.
NOTE: Security risks are involved in using this directive, because authentication spoofing,
authentication data verification, and substitution can occur on the client side. HP recommends that
you disable this directive for high security.
The default setting is yes.
For example:
X11Forwarding yes
X11UseLocalhost
Use this directive to bind the X11 forwarding server to the loopback address or the wildcard
address. For a loopback address, the host name part of the DISPLAY environment variable is
localhost. This prevents remote hosts from connecting to the proxy display. However, some
older X11 clients cannot function with this configuration.
Set the X11UseLocalhost directive to no to bind the forwarding server to the wildcard address.
The default setting is no.
For example:
X11useLocalhost no
XAuthLocation
Use this directive to specify the full pathname of the xauth(1) program.
The default is /usr/bin/X11/xauth.
For example:
XAuthLocation usr/bin/X11/xauth
Sample HP-UX Secure Shell Server Configuration File
Following is a sample HP-UX Secure Shell server configuration file:
# $OpenBSD: sshd_config,v 1.73 2005/12/06 22:38:28 reyk Exp $
# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin:/opt/ssh/bin
# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options change a
# default value.
#Port 22
Protocol 2
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::
Server Configuration Directives 81