Allowtcpforwarding; Auditconsole - HP NonStop SSH 544701-014 Reference Manual

If omitted, ALLOWPASSWORDSTORE will be set to TRUE.
Considerations
•
If ALLOWPASSWORDSTORE is set to TRUE, passwords can be added manually to the user's password store
using the SSHCOM ADD PASSWORD command.
Passwords can also be added interactively, when users are prompted after a successful SSH password
authentication with a remote SSH daemon.
Example
ALLOWPASSWORDSTORE TRUE

ALLOWTCPFORWARDING

Use this parameter to specify whether the SSH2 daemon will completely reject TCP port forwarding through SSH or
allow TCP port forwarding depending on user configuration.
Parameter Syntax
ALLOWTCPFORWARDING [TRUE|FALSE]
Arguments
[TRUE|FALSE]
Specifies whether to allow port forwarding or not. Valid values are
TRUE: port forwarding will be allowed unless user attribute ALLOW-TCP-FORWARDING is set to NO
o
for a specific user.
FALSE: port forwarding will be generally denied, independent of the value of user attribute ALLOW-TCP-
o
FORWARDING.
Default
If omitted, SSH2 will reject port forwarding.
Considerations
This SSH2 parameter specifies on a global scope whether TCP port forwarding is allowed. Even if you set this parameter
to TRUE, you may allow or deny port forwarding at the user level by setting the ALLOW-TCP-FORWARDING USER
attribute. See the SSHCOM Reference for details.
Example
ALLOWTCPFORWARDING TRUE

AUDITCONSOLE

Use this parameter to define if and to what console device SSH2 audit messages are written to.
Parameter Syntax
AUDITCONSOLE * | % | $0 | auditdevice
Arguments
*
Signifies that no audit messages are written to a console.
%
Means that audit messages are written to the home terminal of the SSH2 process.
56 • Configuring and Running SSH2
HP NonStop SSH Reference Manual