HP-UX Secure Shell Getting Started Guide

Example 4-3 To Enable all Users Except User U1 to Authenticate Using Kerberos Authentication
Add the following line in the sshd_config file:
KerberosAuthDenyUsers U1
NOTE: These configuration directives are not specified in the default sshd_config file. To
change the default setting of these configuration directives, you must add the directive in the
sshd_config file and assign a value to it.
Figure 4-1 illustrates how the sshd daemon uses the Allow and Deny configuration directives
to find out if user U1 is permitted to authenticate using password authentication.
Figure 4-1 Flowchart Depicting the Usage of the Allow and Deny Configuration Directives
46 Configuring HP-UX Secure Shell Authentication Methods