Index

A

access rules, Selectors, Defining Access Rules Using Selectors (Advanced Mode)

ACE/Agent, RSA SecurID Submethod

ACE/Server, RSA SecurID Submethod

Active Directory, Editing Selectors

address

listen, The params Block, Network

administrators, Disabling Root Login (Unix)

advanced GUI mode, SSH Tectia Server

agent forwarding, Agent Forwarding (Unix)

AIX

installation, Installing on AIX
uninstallation, Removing from AIX

allowed hosts, Restricting Connections

allowing commands, The services Block, Commands

allowing subsystems, The services Block, Subsystems

allowing terminal access, The services Block, Basic

allowing tunneling, The services Block, Local Tunnels, Remote Tunnels

application tunneling, Tunneling

audit message reference, Audit Messages

audit messages, SFTP

auditing, Auditing

authentication, Authentication, Authentication

certificate, Server Authentication with Certificates, User Authentication with Certificates, Configuring Certificates
GSSAPI, User Authentication with GSSAPI
host-based, Host-Based User Authentication
host-based with certificates, Using Certificates
Kerberos, User Authentication with GSSAPI
keyboard-interactive, User Authentication with Keyboard-Interactive, Pluggable Authentication Module (PAM) Submethod, RSA SecurID Submethod, RADIUS Submethod
PAM, User Authentication with Keyboard-Interactive, Pluggable Authentication Module (PAM) Submethod
password, User Authentication with Passwords, User Authentication with Keyboard-Interactive
public-key, Server Authentication with Public Keys, User Authentication with Public Keys
RADIUS, User Authentication with Keyboard-Interactive, RADIUS Submethod
SecurID, User Authentication with Keyboard-Interactive, RSA SecurID Submethod

authentication chains, The authentication-methods Block

authentication methods, The authentication-methods Block, Parameters, Authentication

authority info access, Server Authentication with Certificates, User Authentication with Certificates

authorization file, The authentication-methods Block, Parameters, Using the Authorization File, Files, Authorization File Options

authorized_keys directory, The authentication-methods Block, Parameters, User Authentication with Public Keys, Files

authorized_keys file, Using Keys Generated with OpenSSH, Files

automated file transfer, Automated File Transfer Script

B

banner message, The authentication-methods Block, General, Notification
base-64, Options
basic configuration, Configuring SSH Tectia Server

C

CA certificate, The params Block, Certificate Validation, Configuring Certificates

certificate

enrolling, Certificate Enrollment Using ssh-cmpclient-g3
revoked, Server Authentication with Certificates

certificate authentication

server, The params Block, Identity, Server Authentication with Certificates
user, The params Block, Certificate Validation, User Authentication with Certificates, Configuring Certificates

certificate cache file, The params Block, Certificate Validation

certificate revocation list (CRL), The params Block, Certificate Validation, Server Authentication with Certificates, User Authentication with Certificates

certificate validation, The params Block, Certificate Validation

certificate viewer, ssh-certview-g3

certificates in host-based authentication, Using Certificates

certification

FIPS 140-2, The params Block, General

certification authority (CA), The params Block, Certificate Validation, Server Authentication with Certificates

changing host key, Notifying the Users of the Host Key Change

channel, Tunneling

chroot, Special Considerations on Windows

chrooting, Chrooting (Unix), Chrooting SFTP (Unix)

ciphers, The connections Block, Parameters

CMP client, ssh-cmpclient-g3

command-line tools, Command-Line Tools

commands, The services Block, Commands

Compatibility Notes, Examples of Use

configuration file

server, Location of SSH Tectia Server Files, ssh-server-config
syntax, Server Configuration File Syntax

connection rules, The connections Block, Connections and Encryption

connections

maximum number, The params Block, General

CRL

disabling, The params Block, Certificate Validation

CRL auto update, The params Block, Certificate Validation

CRL distribution point, Server Authentication with Certificates, User Authentication with Certificates

CRL prefetch, The params Block, Certificate Validation

CryptiCore, Enabling CryptiCore

cryptographic library, The params Block, General

customer support, Customer Support

D

debug log, SSH Tectia Server

debugging

on Unix, Starting SSH Tectia Server in Debug Mode on Unix
on Windows, Starting SSH Tectia Server in Debug Mode on Windows

default port, The params Block, Network

default settings, SSH Tectia Server

denying commands, The services Block, Commands, Disabling Remote Commands

denying connection attempts, Restricting Connections

denying file transfers, Disabling File Transfers

denying subsystems, The services Block, Subsystems

denying terminal access, The services Block, Basic, Disabling Terminal Access , Disabling Terminal Access

denying tunneling, The services Block, Local Tunnels, Remote Tunnels, Disabling Tunneling

Diffie-Hellman key exchange, Server Authentication with Certificates

directory

profile, Special Considerations on Windows
root, Special Considerations on Windows
virtual, SFTP, Defining SFTP Virtual Folders (Windows)

disabling CRL, The params Block, Certificate Validation

disclaimer before login, Notification

disk space requirement, Hardware and Space Requirements

Document Type Definition (DTD), Server Configuration File Syntax

documentation, About This Document

documentation conventions, Documentation Conventions

DoD PKI, The params Block, Certificate Validation

domain controller, Special Considerations on Windows

domain user account, Special Considerations on Windows, Special Considerations on Windows

DSA key

private, Identity
public, Identity

DSA key pair, Server Authentication with Public Keys

E

editing selectors, Defining Access Rules Using Selectors (Advanced Mode)
enrolling host certificate, Certificate Enrollment Using ssh-cmpclient-g3
environment variables, The services Block, Environment Variables
event log, The params Block, SSH Tectia Server, Logging, Auditing, Audit Messages
examples of using SSH Tectia Server, Examples of Use
expired CRL, The params Block, Certificate Validation
external host key, The params Block, Identity, Server Authentication using External Host Keys
external key viewer, ssh-ekview-g3

F

failure

password authentication, Authentication Fails for Domain Account on SSH Tectia Server on Windows

Federal Information Processing Standard (FIPS), The params Block, General

file locations

installed files, Location of SSH Tectia Server Files

file transfer, File Transfer

automated, Automated File Transfer Script

fingerprint, Notifying the Users of the Host Key Change, Options

FIPS 140-2 certification, The params Block, General

FIPS mode, The connections Block, General

firewall, Configuring Certificates

folder

virtual, SFTP, Defining SFTP Virtual Folders (Windows)

forced commands, The services Block, Commands, Forced Commands

forwarding, Tunneling

agent, Agent Forwarding (Unix)
local, Local Tunnels
remote, Remote Tunnels
X11, X11 Forwarding (Unix)

FreeRADIUS, RADIUS Submethod

fully qualified domain name (FQDN), Editing Selectors, Local Tunnels, Remote Tunnels, Certificate Enrollment Using ssh-cmpclient-g3, Server Configuration, Files

G

generating host key, Identity, Generating the Host Key
Generic Security Service API (GSSAPI), User Authentication with GSSAPI
getting started with SSH Tectia Server, Getting Started
getting support, Customer Support
group, The authentication-methods Block, The services Block, Selectors (Advanced Mode), Services, Special Considerations on Windows
GSSAPI authentication, The authentication-methods Block, Parameters, User Authentication with GSSAPI
GUI mode, SSH Tectia Server

H

help files, Man Pages and Help Files

Hexl, Options

home folder, SFTP, Defining SFTP Virtual Folders (Windows)

host certificate, The params Block, Identity

enrolling, Certificate Enrollment Using ssh-cmpclient-g3

host key, Location of SSH Tectia Server Files, The params Block, Identity

changing, Notifying the Users of the Host Key Change
external, The params Block, Identity, Server Authentication using External Host Keys
multiple, Server Authentication with Public Keys
private, The params Block
public, The params Block

host key generation, Identity, Generating the Host Key

host-based authentication, The authentication-methods Block, Parameters, Host-Based User Authentication, Files

host-based authentication with certificates, Using Certificates

HP-UX

installation, Installing on HP-UX
uninstallation, Removing from HP-UX

HTTP proxy URL, The params Block, Certificate Validation

HTTP repository, Server Authentication with Certificates, User Authentication with Certificates

I

IAS, RADIUS Submethod

IBM AIX, Installing on AIX

identity, Identity

ignoring AIX rlogin restriction, The params Block

installation

planning, Preparing for Installation
upgrading, Upgrading Previously Installed Secure Shell Software

installation packages, Packaging

installed files, Location of SSH Tectia Server Files

installing on AIX, Installing on AIX

installing on HP-UX, Installing on HP-UX

installing on Linux, Installing on Linux

installing on Solaris, Installing on Solaris

installing on Windows, Installing on Windows

Internet Authentication Service (IAS), RADIUS Submethod

K

keepalive, The connections Block, Parameters

Kerberos, The authentication-methods Block

Kerberos authentication, User Authentication with GSSAPI

key

host, The params Block, Identity

key exchange, Server Authentication with Certificates

key fingerprint, Notifying the Users of the Host Key Change, Options

key generation, Generating the Host Key

keyboard-interactive authentication, The authentication-methods Block, Parameters, User Authentication with Keyboard-Interactive, Pluggable Authentication Module (PAM) Submethod, RSA SecurID Submethod, RADIUS Submethod

L

LDAP servers, The params Block, Certificate Validation, Configuring Certificates

legal disclaimer, Notification

library

cryptographic, The params Block, General

library certification

FIPS 140-2, The params Block, General

license file, Licensing, Location of SSH Tectia Server Files

licensing, Licensing

Lightweight Directory Access Protocol (LDAP), Server Authentication with Certificates, User Authentication with Certificates

Linux

installation, Installing on Linux
uninstallation, Removing from Linux

listen address, The params Block, Network, Restricting Connections

listener, The params Block, Network

local port forwarding, Local Tunnels

local tunnel, Tunneling, Local Tunnels

local user account, Special Considerations on Windows

location

installed files, Location of SSH Tectia Server Files

log message reference, Audit Messages

log on locally rights, Special Considerations on Windows

logging, The params Block, SSH Tectia Server, Logging, Auditing, Audit Messages

customizing, Customizing Logging

login grace time, The authentication-methods Block, General

M

MACs, The connections Block, Parameters
man pages, Man Pages and Help Files
man-in-the-middle attack, Notifying the Users of the Host Key Change, Server Authentication with Certificates
maximum number of connections, The params Block, General
maximum number of processes, The params Block, General
message before login, Notification
message of the day (MOTD), The services Block
Microsoft IAS, RADIUS Submethod
Microsoft Windows, Installing on Windows
MSI package, Installing on Windows
multiple host keys, Server Authentication with Public Keys

N

network access server (NAS), The authentication-methods Block, RADIUS Submethod
Network Address Translation (NAT), Server Configuration
network interface binding, Restricting Connections
network interface card, Network
network settings, Network

O

OCSP responders, The params Block, Certificate Validation, Configuring Certificates

Online Certificate Status Protocol (OCSP), Server Authentication with Certificates, User Authentication with Certificates

OpenSSH authorized_keys file, The authentication-methods Block, Parameters, Using Keys Generated with OpenSSH, Files

OpenSSH keys, Using Keys Generated with OpenSSH

OpenSSH SCP, The services Block, SFTP, Commands

overload

on CPU, CPU Overload on SSH Tectia Server on HP-UX

P

PAM authentication, The authentication-methods Block, User Authentication with Keyboard-Interactive, Pluggable Authentication Module (PAM) Submethod

serialization, PAM Serialization
with LDAP, PAM Used with LDAP on Red Hat Linux

password authentication, The authentication-methods Block, Parameters, Keyboard-Interactive Submethods, User Authentication with Passwords, Special Considerations on Windows, User Authentication with Keyboard-Interactive

PEM encoding, Options

Personal Information Exchange (PFX), Identity

PKCS #7 package, Configuring Certificates

planning the installation, Preparing for Installation

Pluggable Authentication Module (PAM), User Authentication with Keyboard-Interactive, Pluggable Authentication Module (PAM) Submethod

port forwarding, Tunneling

local, Local Tunnels
remote, Remote Tunnels
restricting, Tunneling

port number

default, The params Block, Network

private key

DSA, Identity
host, The params Block, Identity, Server Authentication with Public Keys, Certificate Enrollment Using ssh-cmpclient-g3

privileged users, Disabling Root Login (Unix)

processes

maximum number, The params Block, General

profile directory, Special Considerations on Windows

proxy scheme, The params Block

proxy server, Configuring Certificates

proxy settings, Proxy Rules

public key

host, The params Block, Identity
user, Special Considerations on Windows

public-key authentication, Parameters

server, The params Block, Identity, Server Authentication with Public Keys
user, The authentication-methods Block, User Authentication with Public Keys

R

RADIUS authentication, The authentication-methods Block, Keyboard-Interactive Submethods, User Authentication with Keyboard-Interactive, RADIUS Submethod

random_seed file, Files

recording ptyless sessions, The params Block

Red Hat Linux, Installing on Linux

rekeying interval, The connections Block, Parameters

related documents, About This Document

remote administration, System Administration

remote port forwarding, Remote Tunnels

remote tunnel, Tunneling, Remote Tunnels

removing

old versions, Upgrading Previously Installed Secure Shell Software

removing from AIX, Removing from AIX

removing from HP-UX, Removing from HP-UX

removing from Linux, Removing from Linux

removing from Solaris, Removing from Solaris

removing from Windows, Removing from Windows

restoring default settings, SSH Tectia Server

restricting services, The services Block, Services, Restricting Services, Restricting Services

restricting tunneling, The services Block, Local Tunnels, Remote Tunnels, Tunneling, Restricting Services

revoked certificate, Server Authentication with Certificates

rights

log on locally, Special Considerations on Windows

root directory, Special Considerations on Windows

RPM packages, Installing on Linux

RSA ACE/Agent, RSA SecurID Submethod

RSA ACE/Server, RSA SecurID Submethod

RSA key

private, Identity
public, Identity

RSA key pair, Server Authentication with Public Keys

RSA SecurID, RSA SecurID Submethod

S

SCEP client, ssh-scepclient-g3

secure application connectivity, Tunneling

secure file transfer, File Transfer

Secure File Transfer Protocol (SFTP), Special Considerations on Windows

Secure Shell server

starting, Starting and Stopping the Server
stopping, Starting and Stopping the Server

secure system administration, System Administration

SecurID authentication, The authentication-methods Block, Keyboard-Interactive Submethods, User Authentication with Keyboard-Interactive, RSA SecurID Submethod

selector

administrator, Editing Selectors
certificate, The authentication-methods Block, Editing Selectors
host certificate, The authentication-methods Block, Editing Selectors
interface, The connections Block, The authentication-methods Block, Editing Selectors
IP, The connections Block, The authentication-methods Block, Editing Selectors
public key passed, The authentication-methods Block, Editing Selectors
user, The authentication-methods Block, Editing Selectors
user group, The authentication-methods Block, Editing Selectors
user password change needed, The authentication-methods Block
user privileged, The authentication-methods Block, Editing Selectors

selector handling rules, Selector Processing

selectors, Selectors, Defining Access Rules Using Selectors (Advanced Mode)

server

starting, Starting and Stopping the Server
stopping, Starting and Stopping the Server

server authentication methods, The params Block, Identity, Authentication

server authentication with certificates, Server Authentication with Certificates

server authentication with external key, Server Authentication using External Host Keys

server authentication with public key, Server Authentication with Public Keys

server banner message, Notification

server certificate, The params Block, Identity, Server Authentication with Certificates

server configuration file, Location of SSH Tectia Server Files, ssh-server-config

server host key, Location of SSH Tectia Server Files

server settings, SSH Tectia Server

server status, SSH Tectia Server

server versions, Product information

services

restricting, The services Block, Services, Restricting Services, Restricting Services

setting users to a group, The authentication-methods Block, The services Block, Selectors (Advanced Mode), Services

settings

default, SSH Tectia Server

SFTP

audit messages, The services Block, SFTP

SFTP subsystem, Enabling the SFTP Subsystem

SFTP virtual folders, SFTP, Defining SFTP Virtual Folders (Windows)

shared user account, Using a Shared Account

shell access, Disabling Root Login (Unix)

simple GUI mode, SSH Tectia Server

socket, Network

SOCKS server URL, The params Block, Certificate Validation

Solaris

installation, Installing on Solaris
uninstallation, Removing from Solaris

SSH Tectia Client, Component Terminology

SSH Tectia Client (with EFT), Component Terminology

SSH Tectia Connector, Component Terminology

SSH Tectia Server, Component Terminology

starting, Starting and Stopping the Server
stopping, Starting and Stopping the Server

SSH Tectia Server (with EFT), Component Terminology

SSH Tectia Server (with Tunneling), Component Terminology

SSH Tectia Server Configuration tool, Configuration Tool (Windows)

SSH Tectia Server for IBM z/OS, Component Terminology

SSH Tectia Server versions, Product information

ssh-certview-g3(.exe), ssh-certview-g3

ssh-cmpclient-g3(.exe), ssh-cmpclient-g3

ssh-ekview-g3(.exe), ssh-ekview-g3

ssh-keygen-g3(.exe), Generating the Host Key, ssh-keygen-g3

ssh-scepclient-g3(.exe), ssh-scepclient-g3

ssh-server-config-tool(.exe), ssh-server-config-tool

ssh-server-config.xml, Location of SSH Tectia Server Files, ssh-server-config

ssh-server-g3(.exe), ssh-server-g3

starting the server, Starting and Stopping the Server

status, SSH Tectia Server

stopping the server, Starting and Stopping the Server

subsystems, The services Block, Subsystems

denying audit messages, The services Block
executing directly, The services Block

Sun Solaris, Installing on Solaris

supported platforms, System Requirements

SUSE LINUX, Installing on Linux

system configuration, Configuring SSH Tectia Server

system log, The params Block, SSH Tectia Server, Logging, Auditing

system requirements, System Requirements

T

technical support, Customer Support

terminal access, The services Block, Basic, Disabling Root Login (Unix)

terminology, Component Terminology

ticket forwarding, The authentication-methods Block, Parameters

troubleshooting, Troubleshooting SSH Tectia Server

troubleshooting log, SSH Tectia Server

trusted CA, User Authentication with Certificates

trusted_hosts directory, Server Configuration, Files

tunnel

agent, The services Block, Agent Forwarding (Unix)
local, The services Block, Tunneling, Local Tunnels
remote, The services Block, Tunneling, Remote Tunnels
X11, The services Block, X11 Forwarding (Unix)

tunneling, Tunneling

access control, Restricting Services
restricting, Tunneling

U

uninstalling from AIX, Removing from AIX

uninstalling from HP-UX, Removing from HP-UX

uninstalling from Linux, Removing from Linux

uninstalling from Solaris, Removing from Solaris

uninstalling from Windows, Removing from Windows

upgrading, Upgrading Previously Installed Secure Shell Software

use cases, Getting Started

user account

domain, Special Considerations on Windows, Special Considerations on Windows
local, Special Considerations on Windows
shared, Using a Shared Account

user authentication based on host, Host-Based User Authentication, Using Certificates

user authentication methods, The authentication-methods Block, Authentication, Authentication

user authentication with certificates, User Authentication with Certificates, Configuring Certificates

user authentication with GSSAPI, User Authentication with GSSAPI

user authentication with keyboard-interactive, User Authentication with Keyboard-Interactive

user authentication with password, User Authentication with Passwords

user authentication with public key, User Authentication with Public Keys

user configuration directory, The params Block, General

user group, Special Considerations on Windows

user home directory, SFTP, Defining SFTP Virtual Folders (Windows)

User Manager, Special Considerations on Windows

user profile directory, Special Considerations on Windows

V

viewing event log, SSH Tectia Server
viewing troubleshooting log, SSH Tectia Server
virtual directories, SFTP
virtual folders, Defining SFTP Virtual Folders (Windows)

W

well-known port, Tunneling

Windows

installation, Installing on Windows
uninstallation, Removing from Windows

Windows Event Log, SSH Tectia Server, Logging, Auditing

Windows password, User Authentication with Passwords, Special Considerations on Windows

Windows user group, Special Considerations on Windows

Windows User Manager, Special Considerations on Windows

X

X.509 certificate, Certificate Enrollment Using ssh-cmpclient-g3, Configuring Certificates

X11 forwarding, X11 Forwarding (Unix)

XAuth path, The params Block

XML attribute

allow-missing, The connections Block, The authentication-methods Block
allow-ticket-forwarding, The authentication-methods Block
allow-undefined, Selectors and Undefined Data
authorization-file, The authentication-methods Block
authorized-keys-directory, The authentication-methods Block
chroot, The services Block
client-nas-identifier, The authentication-methods Block
disable-crls, The params Block
dll-path, The authentication-methods Block
failure-delay, The authentication-methods Block
http-proxy-url, The params Block
idle-timeout, The services Block
ignore-aix-rlogin, The params Block
login-grace-time, The authentication-methods Block
mask-bits, The authentication-methods Block
max-connections, The params Block
max-processes, The params Block
max-tries, The authentication-methods Block
openssh-authorized-keys-file, The authentication-methods Block
print-motd, The services Block
proxy-scheme, The params Block
record-ptyless-sessions, The params Block
repeat-block, The authentication-methods Block
require-dns-match, The authentication-methods Block
set-group, The authentication-methods Block
socks-server-url, The params Block
tcp-keepalive, The connections Block
use-expired-crls, The params Block
user-config-dir, The params Block
xauth-path, The params Block

XML DTD, ssh-server-config, Server Configuration File Syntax

XML element, ssh-server-config

attribute, The services Block
auth-file-modes, The authentication-methods Block, Enabling Public-Key Authentication
auth-gssapi, The authentication-methods Block
auth-hostbased, The authentication-methods Block
auth-keyboard-interactive, The authentication-methods Block
auth-password, The authentication-methods Block
auth-publickey, The authentication-methods Block
authentication, The authentication-methods Block
authentication-methods, The authentication-methods Block
banner-message, The authentication-methods Block
ca-certificate, The params Block
cert-cache-file, The params Block
cert-validation, The params Block
cipher, The connections Block
command, The services Block
connection, The connections Block
connections, The connections Block
crl-auto-update, The params Block
crl-prefetch, The params Block
crypto-lib, The params Block
dod-pki, The params Block
environment, The services Block
externalkey, The params Block
group, The services Block
hostkey, The params Block
ldap-server, The params Block
limits, The params Block
listener, The params Block
log-events, The params Block
logging, The params Block
mac, The connections Block
ocsp-responder, The params Block
params, The params Block
private, The params Block
public, The params Block
radius-server, The authentication-methods Block
radius-shared-secret, The authentication-methods Block
rekey, The connections Block
rule, The services Block
selector, The connections Block, The authentication-methods Block, The services Block
selector/certificate, The authentication-methods Block
selector/host-certificate, The authentication-methods Block
selector/interface, The connections Block, The authentication-methods Block
selector/ip, The connections Block, The authentication-methods Block
selector/publickey-passed, The authentication-methods Block
selector/user, The authentication-methods Block
selector/user-group, The authentication-methods Block
selector/user-password-change-needed, The authentication-methods Block
selector/user-privileged, The authentication-methods Block
services, The services Block
settings, The params Block
submethod-generic, The authentication-methods Block
submethod-pam, The authentication-methods Block
submethod-password, The authentication-methods Block
submethod-radius, The authentication-methods Block
submethod-securid, The authentication-methods Block
subsystem, The services Block
terminal, The services Block
tunnel-agent, The services Block
tunnel-local, The services Block
tunnel-local/dst, The services Block
tunnel-local/src, The services Block
tunnel-remote, The services Block
tunnel-remote/listen, The services Block
tunnel-remote/src, The services Block
tunnel-x11, The services Block
x509-certificate, The params Block