Your browser does not allow this site to store cookies and other data. Some functionality on this site may not work without them. See Privacy Policy for details on how we would use cookies.

SSH Tectia 
PreviousNextUp[Contents] [Index]

    About This Document >>
    Installing SSH Tectia Server >>
    Getting Started >>
    Configuration >>
        Configuration Files >>
        Subconfigurations >>
            Host-Specific Subconfiguration
            User-Specific Subconfiguration
        Enabling FIPS Mode
        Ciphers and MACs
        Compression
        Configuring Root Logins
        Restricting User Logins
        Subsystems
        Configuring ssh2 for ssh1 Compatibility
        Auditing >>
        Securing SSH Tectia Client and Server >>
    Authentication >>
    Application Tunneling >>
    Troubleshooting >>
    Man Pages
    Advanced Options >>
    Log Messages >>

Host-Specific Subconfiguration

The host-specific configuration files are configured with the HostSpecificConfig variable. These files are read immediately after a new process is launched to handle the connection. Thus most configuration options can be set in these. The syntax is the following:

HostSpecificConfig pattern subconfig-file

pattern will be used to match the client host as specified under AllowHosts on the sshd2_subconfig man page. The file subconfig-file will then be read, and configuration data amended accordingly.

The file is read before any actual protocol transactions begin, and you can specify most of the options allowed in the main configuration file. You can specify more than one subconfiguration file, in which case the patterns are matched and the files read in the specified order. Values of configuration options defined later will either override or amend the previous value depending on the option. The effect of redefining an option is described in the documentation for that option. For example, setting Ciphers in the subconfiguration file will override the old value, but setting AllowUsers will amend the value.

Example 1: The following matches (from) any host:

HostSpecificConfig   .*   /etc/ssh2/subconfig/host_ext.conf

Example 2: The following matches a subnet mask:

HostSpecificConfig   \m192.168.0.0/16   /etc/ssh2/subconfig/host_int.conf

For more information, please see the sshd2_subconfig and sshd2_config man page.

PreviousNextUp[Contents] [Index]


[ Contact Information | Support | Feedback | SSH Home Page | SSH Products ]

Copyright © 2010 SSH Communications Security Corp.
This software is protected by international copyright laws. All rights reserved.
Copyright Notice

===AUTO_SCHEMA_MARKUP===