HP-UX Secure Shell Getting Started Guide

NOTE: This configuration directive is specific to HP-UX Secure Shell, and is not available in

OpenSSH base code.

DenyGroups

Use this directive to deny login for users whose primary group or supplementary group list

matches one of the specified strings. This directive must be followed by a list of group name

strings separated by spaces. You can use the star (*) and question mark (?) characters as wildcards

in the strings.

NOTE: Only group names are valid; numerical group IDs are not recognized.

By default, login is enabled for all groups.

For example:

DenyGroups staff

DenyUsers

Use this directive to deny login for user names that match one of the specified strings. This

directive must be followed by a list of user name strings separated by spaces. You can use the

star (*) and question mark (?) characters as wildcards in the strings.

NOTE: Only user names are valid; numerical user IDs are not recognized.

If the pattern takes the form USER@HOST then USER and HOST are checked separately, restricting

logins to particular users from particular hosts.

By default, login is allowed for all users.

For example:

DenyUsers Clay@zin.org Arian

This command denies login to user Clay, connecting from zin.org. It also denies login from

all addresses to anyone logging in as Arian.

EnforceSecureTTY

Use this directive to specify whether the sshd daemon must restrict root logins to the tty names

listed in the /etc/securetty file only.

The default setting is no.

For example:

EnforceSecureTTY no

NOTE: This configuration directive is specific to HP-UX Secure Shell, and is not available in

the OpenSSH base code.

ForceCommand

Use this directive to force the execution of the command specified by ForceCommand, ignoring

any other command specified by the client. Previous releases of HP-UX Secure Shell specified

this option in the authorised_keys file.

For example:

ForceCommand pwd

In the above scenario, the pwd is executed regardless of the command specified by the client.

70 Configuration Files and Directives