Installation
System Requirements
Replace an Existing Secure Shell Program
Install on Linux
Install on Sun Solaris
Install on HP-UX
Install on IBM AIX
Getting Started
Start and Stop the Server
Make an SSH Connection
Transfer Files Using sftp
Transfer Files Using scp
Understanding Secure Shell
Configuration Files
Client Configuration Files
Configuration File Format
Host Stanzas
Command Line Options
Server Configuration Files
Server Subconfiguration Files
Subconfiguration File Samples
Data Protection
Encryption
Data Integrity
Configuring Ciphers and MACs
FIPS Mode
Server Authentication
Public Key Authentication
Public Key Authentication Sequence of Events
Create a New Host Key
Add a Key to the Client Known Hosts List
Display the Fingerprint of the Host Public Key
Kerberos (GSSAPI) Authentication
Kerberos System Requirements
Configure Kerberos Server and Client Authentication
Client Authentication
Client Authentication Methods
Configure Password Authentication
Configure Keyboard Interactive Authentication
Configure Public Key User Authentication
Use the Key Agent
Pluggable Authentication Modules (PAM)
Configure PAM Authentication
Configure SecurID Authentication
Configure Account Management on HP-UX Trusted Systems
Secure File Transfer
Secure File Transfer (sftp)
Use sftp Interactively
Run sftp Batch Files
Supported sftp Commands
Secure File Copy (scp)
Port Forwarding
Local Port Forwarding
Remote Port Forwarding
X Protocol Forwarding
Configure Port Forwarding
Port Forwarding Settings
Controlling Access to the Server
Access Control Settings
Using Allow and Deny Keywords
Configuring User Access
Configuring Group Access
Configuring Client Host Access
Logging and Auditing
Client Debugging
Server Debugging and Auditing
Auditing Services
Appendix
Files Used by the Client
Files Used by the Server
Client Configuration Keywords
Server Configuration Keywords
ssh Command Line Options
ssh Escape Sequences
ssh Exit Values
ssh-keygen Command Line Options
scp Command Line Options
sftp Command Line Options
ssh-add Command Line Options
ssh-agent Command Line Options
sshd Command Line Options
Glossary of Terms
authentication
cipher
data integrity
digital signature
encryption
GSSAPI (Generic Security Services Application Program Interface)
hash
Kerberos
MAC (Message Authentication Code)
passphrase
port forwarding
public key/private key
regular expression
Secure Shell
socket
Copyrights and Notices