HP-UX Secure Shell Getting Started Guide HP-UX 11i v1, HP-UX 11i v2, and HP-UX 11i v3 (5900-3142, June 2013)

ControlPath
Use this directive to specify the path to the control socket used for connection sharing. To disable
connection sharing, set ControlPath to none. The following substitutions occur for the
ControlPath value:
%L Specifies the first component of the local host name.
%l Specifies the local host name (including domain name).
%h Specifies the target host name.
%n Specifies the original target host name in the command line.
%p Specifies the port.
%r Specifies the remote login user name.
%u Specifies the username of the user running ssh(1).
The default value is null.
For example:
ControlPath /tmp/socket_control
NOTE: HP recommends including all substitutions for connection sharing. This ensures that shared
connections are uniquely identified.
ControlPersist
When used with ControlMaster, this directive specifies that the master connection must remain
open in the background (waiting for future client connections) after the initial client connection is
closed. If set to no, then the master connection is not placed in the background, and closes as soon
as the initial client connection is closed. If set to yes, the master connection remains in the
background indefinitely (until killed or closed via a mechanism such as the ssh(1) -O exit option).
If set to a time in seconds, or a time in any of the formats documented in the sshd_config(5)
file, then the backgrounded master connection automatically terminates after it is remained idle
(with no client connections) for the specified time.
DynamicForward
Use this directive to specify the TCP/IP port on the local system to be forwarded over the secure
channel, and the application protocol to be used. The value for this directive must be a port number.
The SOCKS4 and SOCKS5 protocols are supported, where HP-UX Secure Shell acts as a SOCKS
server. You can specify multiple forwarding and add additional forwardings on the command line.
NOTE: Only a superuser can forward privileged ports.
DynamicForward does not have a default value.
For example:
DynamicForward 8888
EnableSSHkeysign
Use this directive to enable the use of the ssh-keysign(8) helper program during host-based
authentication. This option must be placed in the non-host specific section. For more information,
see the ssh-keysign(8).
The default setting is no.
For example:
EnableSSHkeysign no
EscapeChar
Use this directive to set the escape character. You can also set the escape character on the command
line.
Client Configuration Directives 87