SSH Reference Manual

Also, SUPER.SUPER would have partial access rights for all USER records configured with a super group user
as OWNER (if the policy is GUARDIANNAME or BOTH)
Default
The default value is NONE.
Examples
DAEMONMODEOWNERPOLICY LOGINNAME
See also
• FULLSSHCOMACCESSGROUP<j>, FULLSSHCOMACCESSUSER<i>
,
PARTIALSSHCOMACCESSGROUP<n> and PARTIALSSHCOMACCESSUSER<k>
• See "Security within SSHCOM" in section "SSHCOM Command Reference" about full and partial access
rights.
DISCONNECTIFUSERUNKNOWN
Use this parameter to specify that incoming connections are immediately disconnected when the supplied SSH user name
could not be found in the User Database.
Parameter Syntax
DISCONNECTIFUSERUNKNOWN TRUE|FALSE
Arguments
TRUE
The session will be disconnected immediately with indication "Access denied".
FALSE
A list of all supported authentication methods is sent back (this avoids returning the information that the user
does not exist).
Default
The default for this parameter is FALSE.
Example
DISCONNECTIFUSERUNKNOWN TRUE
Considerations
• RFC 4252 allows both ways of processing requests of unknown users.
• If the parameter is not specified or is set to FALSE, the behavior is the same as before the parameter was
introduced.
DNSMODE
When host names get resolved, multiple IP addresses may be the result for one host name. In versions before 0097 the
first IP address of a possible list of IP addresses was always used. Starting with version 0097 the way how DNS name
resolving is done regarding the use of multiple IP addresses per host name can be configured using parameter
DNSMODE.
Parameter Syntax
DNSMODE FIRST|ALL
HP NonStop SSH Reference Manual Configuring and Running SSH2 • 75