HP-UX Secure Shell Getting Started Guide (762810-001, March 2014)

Example 1 To Enable all Users to Authenticate Using Public key Authentication
Add the following line in the sshd_config file:
PubkeyAuthAllowUsers *
Example 2 To Enable User U1 to Authenticate Using Kerberos Authentication
Add the following line in the sshd_config file:
KerberosAuthAllowUsers U1
You need not set the KerberosAuthDenyUsers configuration directive. Use the configuration
directive that has fewer members.
Example 3 To Enable all Users Except User U1 to Authenticate Using Kerberos Authentication
Add the following line in the sshd_config file:
KerberosAuthDenyUsers U1
NOTE: These configuration directives are commented in the default sshd_config file. To change
the default setting of these configuration directives, you must uncomment the directive in the
sshd_config file and assign a value to it.
Figure 4 illustrates how the sshd daemon uses the Allow and Deny configuration directives to find
out if user U1 is permitted to authenticate using password authentication.
44 Configuring HP-UX Secure Shell authentication methods