Getting Started Guide

ManualsBrandsHP ManualsSoftwareHP HP-UX Data Security Software

VerifyHostKeyDNS

Use this directive to specify whether or not to verify the remote key using DNS and SSHFP resource

records.

Following are some valid values for the VerifyHostKeyDNS directive:

yes Specifies that the client implicitly trusts keys that match a secure fingerprint from DNS.

ask Displays information when fingerprints match.

The default setting is no.

For example:

VerifyHostKeyDNS no

NOTE: This directive is available for the SSH-2 protocol only.

VisualHostKey

Use this directive to specify whether an ASCII art representation of the remote host key fingerprint

is printed in addition to the hex fingerprint string at login and for unknown host keys.

The default is no.

For example:

VisualHostKey yes

XAuthLocation

Use this directive to specify the full path name of the xauth utility.

The default setting is /usr/bin/X11/xauth.

For example:

XAuthLocation /usr/bin/X11/xauth

Sample HP-UX Secure Shell Client Configuration File

Following is a sample HP-UX Secure Shell client configuration file:

# $OpenBSD: ssh_config,v 1.21 2005/12/06 22:38:27 reyk Exp $

# This is the ssh client system-wide configuration file. See

# ssh_config(5) for more information. This file provides defaults for

# users, and the values can be changed in per-user configuration files

# or on the command line.

# Configuration data is parsed as follows:

# 1. command line options

# 2. user-specific file

# 3. system-wide file

# Any configuration value is only changed the first time it is set.

# Thus, host-specific definitions should be at the beginning of the

# configuration file, and defaults at the end.

# Site-wide defaults for some commonly used options. For a comprehensive

# list of available options, their meanings and defaults, please see the

# ssh_config(5) man page.

# Host *

# ForwardAgent no

# ForwardX11 no

# RhostsRSAAuthentication no

# RSAAuthentication yes

# PasswordAuthentication yes

# HostbasedAuthentication no

# BatchMode no

# CheckHostIP yes

# AddressFamily any

# ConnectTimeout 0

# StrictHostKeyChecking ask

# IdentityFile ~/.ssh/identity

# IdentityFile ~/.ssh/id_rsa

# IdentityFile ~/.ssh/id_dsa

# GSSAPIAuthentication no

Client Configuration Directives 97