SSH Reference Manual
MODE CONV | BLOCK 
Default is CONV. At the beginning of a session, the terminal (client) and the WINDOW are placed into the selected 
mode. 
MENU HIDDEN | VISIBLE 
Default is VISIBLE. Service menus are built using the names of services with MENU VISIBLE. MENU HIDDEN 
suppresses the service name on the menu, but the service name can still be entered by the remote user. 
See the command "BANNER
", which can disable menus and other messages. 
LIB lib-file-name 
Default is no LIB file. For dynamic sessions, this parameter specifies the library object file name for PROG program 
object files that require a library. 
SWAP $volume-name 
Default is no SWAP volume specified. Specifies the swap volume for dynamic sessions. 
USER (groupnum,usernum) | groupname.username 
USER is only allowed for TYPE DYNAMIC services. If USER is specified, it must match the userid authenticated for 
the session, or the session is terminated with an STN71 message. If the SSH userid has SYSTEM-USER not set to 
*NONE*, then that is the userid for the session; otherwise the userid and password are prompted from the terminal with 
STN15/STN16 messages. Whatever the source for the session userid, it must match the SERVICE USER parameter. 
USER is appropriate for applications which do not perform their own logon, or which need to be restricted. For example, 
RESILIENT services are often restricted to SUPER.SUPER. 
As of STN version B17 (H06.25/J06.14), USER can be specified independent of LOGON REQ. Prior to that, when 
USER was specified, LOGON REQ was automatically set. When USER is present and LOGON is REQ, then the session 
must be authenticated for the specified userid, either by SSH or by response to the STN15 userid prompt. When USER is 
present and LOGON is NONE, the dynamic application will be started under the specified userid without authentication. 
Only use LOGON NONE when the application performs its own logon authentication. 
PARAM “param-text” 
Default is no parameter string. Allows the specification of a parameter string corresponding to the TACL command:  
RUN program-file-name / NAME $pname ,... / param-text  
Param-text is enclosed in double-quotes ("text"), it may be up to 100 characters long, and it may contain the following 
special characters: 
•  Two consecutive double-quotes ("") represent a single double-quote (").  
•  @W or @w is replaced by the window name e.g. $STN.#ZWN0001.  
•  @B or @b is replaced with the backup CPU number, which is the "buddy" of the CPU finally used for the 
dynamic application. The buddy of an even-numbered CPU is the next higher odd-numbered CPU, and the 
buddy of an odd-numbered CPU is the next lower even-numbered CPU.  
•  @I or @i is replaced with IP address of the client workstation. 
•  @S or @s is replaced by the security string returned by SSH, or "PLAIN" if the session is not secure. 
•  @@ is replaced with a single at (@). 
IPRANGE iprange-name 
iprange-name refers to a name of an IPRANGE (see ADD IPRANGE). 
Default: None. 
254 • STN Reference  HP NonStop SSH Reference Manual 










