SSH Reference Manual

If no IPRANGE parameter is specified, then the service does not perform any checking on the IP address of the remote
workstation attempting to connect to the service.
If IPRANGE is defined for the service, then the IP address of the remote workstation must match one of the IP addresses
or IP address ranges in the specified IPRANGE. If the address matches, then the session is allowed to proceed. If the
address does not match, or the IPRANGE is not defined, then the session is terminated ten seconds after displaying the
following message on the remote workstation:
STN51 Workstation IP address not in range for requested service
Note that ADD SERVICE can be done before ADD IPRANGE; however any attempt to connect to the service will be
rejected until the ADD IPRANGE command is completed. Similarly, DELETE IPRANGE will result in rejection of any
connection attempts to services specified in the deleted IPRANGE until another ADD IPRANGE command is used to
redefine the IPRANGE. If an ADD SERVICE command refers to an undefined IPRANGE, the ADD SERVICE
command is accepted, and the following warning message is presented:
SERVICE added - warning IPRANGE not presently defined
HOME home-terminal-name
HOME controls the home terminal name for processes started by STN for TYPE DYNAMIC services. The default home
terminal is the name of the dynamic window being started ($STN.#ZWNxxxx). If HOME is used, it should refer to a
valid terminal name or to a home terminal process like $ZHOME.
HOME is needed in cases where a program continues to run after the STN session terminates. The most common
example is when using the following configuration:
ADD SERVICE pathdyn,TYPE DYNAMIC
,PROGRAM $system.system.pathcom
,HOME $zhome
,PARAM "$pm;run p65"
,MODE BLOCK
Without the HOME parameter, while the Pathway application starts and runs normally, a problem arises if the session is
terminated from the workstation client. This results in PATHCOM creating a ZZSA dump file, usually in subvol
$SYSTEM.SYSTEM.
LOGON REQ | NONE
LOGON controls user authentication for TYPE DYNAMIC services. The default is NONE, requiring no authentication
before starting the application specified by PROG. This is appropriate when the application performs its own
authentication, for example, TACL.
LOGON REQ requires authentication before starting the application. If the SSH SYSTEM-USER for the session is a
valid Guardian userid, then that Guardian userid is used for the session. If SSH SYSTEM-USER is *NONE*, then STN
will prompt the workstation user to enter a valid Guardian userid and password.
LOGON REQ should be used when PROG is the OSS shell (OSH).
LIMIT max-sessions
LIMIT controls the number of simultaneous sessions for a TYPE DYNAMIC service. The default is zero (0), which
disables LIMIT and allows any number of sessions. Values 1-9999 may be specified. STN rejects any attempts to use a
TYPE DYNAMIC service when LIMIT sessions are already active.
DEBUGOPT OFF | <number>
DEBUGOPT controls the debug-option parameter of Guardian procedure call process_create_, used when starting the
application for TYPE DYNAMIC services. The default is OFF, which omits the parameter. A value in the range 0-7 is
used to set the low order three bits <13:15> of the debug-option parameter.
Setting DEBUGOPT 0 will avoid a problem with PATHCOM leaving ZZSA files when a session is terminated at the
remote workstation. Refer to ADD SERVICE parameter HOME for more information.
HP NonStop SSH Reference Manual STN Reference • 255