Setting the ssh management parameters – H3C Technologies H3C SecPath F1000-E User Manual
Page 64
8
To do…
Use the command…
Remarks
For all users or
SFTP users
ssh user username
service-type { all | sftp }
authentication-type
{ password | { any |
password-publickey |
publickey } assign publickey
keyname work-directory
directory-name }
CAUTION:
•
A user without an SSH account can still pass password authentication and log into the server through
Stelnet or SFTP, as long as the user can pass AAA authentication and the service type is SSH.
•
An SSH server supports up to 1024 SSH users.
•
The service type of an SSH user can be Stelnet (Secure Telnet) or SFTP (Secure FTP). For information
about Stelnet, see
. For information about SFTP, see
.
•
For successful login through SFTP, you must set the user service type to sftp or all.
•
As SSH1 does not support service type sftp, if the client uses SSH1 to log into the server, you must set the
service type to stelnet or all on the server. Otherwise, the client will fail to log in.
•
The working folder of an SFTP user is subject to the user authentication method. For a user using only
password authentication, the working folder is the AAA authorized one. For a user using only publickey
authentication or using both the publickey and password authentication methods, the working folder is
the one set by using the ssh user command.
•
You can change the authentication method and public key of an SSH user when the user is
communicating with the SSH server. However, your changes take effect only after the user logs out and
logs in again.
NOTE:
For a user using publickey authentication:
•
You must configure on the device the corresponding user and public key.
•
After login, the commands available for a user are determined by the user privilege level, which is
configured with the user privilege level command on the user interface.
For users using password authentication:
•
You can configure the accounting information either on the device or on the remote authentication server
(such as RADIUS authentication server).
•
After login, the commands available to a user are determined by AAA authorization.
Setting the SSH Management Parameters
SSH management includes:
•
Enabling the SSH server to be compatible with SSH1 client
•
Setting the RSA server key pair update interval, applicable to users using SSH1 client
•
Setting the SSH user authentication timeout period