SSH Reference Manual

• LIFE-CYCLE-STATE: the life-cycle state the user private key is in. Possible values are ‘PENDING’, ‘LIVE’
and ‘EXPIRED’. This is actually not an explicit database field but its value will be determined by the three
database fields CREATION-DATE, LIFE-DATE and EXPIRE-DATE.
The database also contains some additional information collected by SSH2 about each key record:
• LAST-USE: Record usage: Last time the record was used.
• LAST-MODIFIED: Record maintenance: Last time the record was modified.
Client mode record type PASSWORD holds user password information for the Guardian user initiating a client
connection on NonStop. PASSWORD records are added when a user confirms a password is to be stored or via
SSHCOM command ADD PASSWORD. Database key to the PASSWORD entity consists of:
• USERID@HOST: the user name sent to the remote system and the IP address and port of the remote system.
• USER: the name of the Guardian user the public key was generated for
The PASSWORD entity has the following additional properties:
• STATUS: whether the password is frozen or thawed.
The database also contains some additional information about each password record collected by SSH2:
• LAST-USE: Record usage: Last time the record was used.
• LAST-MODIFIED: Record maintenance: Last time the record was modified.
Client mode record type KNOWNHOST holds remote host key information for the Guardian user initiating a client
connection on NonStop. KNOWNHOST records are added when a user accepts a remote host key or via SSHCOM
command ADD KNOWNHOST. Database key to the KNOWNHOST entity consists of:
The KNOWNHOST entity has the following properties:
• KEY: the name of the public key pair generated for the Guardian user
• KNOWNBY: the name of the Guardian user who is allowed to connect to this host (or who accepted the remote
host key when SSH2 parameter STRICTHOSTKEYCHECKING is set to FALSE). The special name 'all' is
supported indicating that the remote host key is configured for all users.
The KNOWNHOST entity has the following additional properties:
• COMMENT: a free text field allowing you to enter a descriptive comment.
• ADDRESSES: the IP addresses or DNS names of the hosts using this public key.
• PORT: the port number of the SSH daemons running on the remote host.
• ALGORITHM: the algorithm used for host authentication. Valid algorithms are SSH-RSA and SSH-DSS.
• PUBLICKEY-FINGERPRINT: The MD5 and bubble-babble fingerprints of the public key.
• STATUS: whether the knownhost is frozen or thawed.
The database also contains some additional information collected by SSH2 about each knownhost:
• LAST-USE: Record usage: Last time the record was used.
• LAST-MODIFIED: Record maintenance: Last time the record was modified.
HP NonStop SSH Reference Manual The SSH User Database • 151