Getting Started Guide

For example:
PermitLocalCommand yes
Port
Use this directive to specify the port number to connect to the remote host.
The default setting is 22.
For example:
Port 22
PreferredAuthentication
Use this directive to specify the order in which the client must try SSH-2 authentication methods.
This enables a client to use one method (for example, keyboard-interactive) before another method
(for example, password).
The default setting for this directive is:
gssapi-with-mic,hostbased,publickey,keyboard-interactive,password.
For example:
PreferredAuthentication gssapi-with-mic, hostbased, publickey,keyboard-interactive,password
Protocol
Use this directive to specify the protocol versions ssh must support in order of preference. Valid
values are 1 and 2. Multiple versions must be comma-separated. HP-UX Secure Shell attempts to
authenticate using SSH-2 first, and falls back to SSH-1 if SSH-2 is not available.
The default setting is 2,1.
For example:
Protocol 2
ProxyCommand
Use this directive to specify the command to be used to connect to the server.
The command can be any command that reads from the standard input and writes to the standard
output. It must connect to an HP-UX Secure Shell server, or execute sshd -i on a system. Host key
management is done using the host name of the host being connected (defaulting to the name
typed by the user).
This directive does not have a default value.
For example, the following directive connects to the server through an HTTP proxy at the 192.0.2.0
IP address:
ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p
This ProxyCommand string is executed with /bin/sh. In the previous command string, the following
substitutions occur:
• The host name substitutes for %h
• The port number substitutes for %p
NOTE: The CheckHostIP directive is not available for connections with a ProxyCommand.
PubkeyAuthentication
Use this directive to specify whether to use public-key authentication.
The default setting is yes.
For example:
PubkeyAuthentication yes
NOTE: This directive is available for the SSH-2 protocol only.
Client Configuration Directives 93