PowerScaleOneFS CLI Command Reference

Required privileges

ISI_PRIV_AUTH

Syntax

isi ssh settings modify
        [--banner <path>]
        [--ca-signature-algorithms <string>]
        [--ciphers <string>]
        [--host-key-algorithms <string>]
        [--ignore-rhosts <boolean>]
        [--kex-algorithms <string>]
        [--login-grace-time <duration>]
        [--log-level <string>]
        [--macs <string>]
        [--max-auth-tries <integer>]
        [--max-sessions <integer>]
        [--max-startups <string>]
        [--permit-empty-passwords <boolean>]
        [--permit-root-login <boolean>]
        [--port <integer>]
        [--print-motd <boolean>]
        [--pubkey-accepted-key-types <string>]
        [--strict-modes <boolean>]
        [--subsystem <string>]
        [--syslog-facility <string>]
        [--tcp-keep-alive <boolean>]
        [--auth-settings-template ( (password | publickey | both  | any | custom)]
        [--authentication-methods  <string>]
        [--challenge-response-authentication  <boolean>]
        [--keyboard-interactive-authentication  <boolean>]
        [--match <string>]
        [--password-authentication <boolean>]
        [--pubkey-authentication <boolean>]
        [--use-dns <boolean>]
        [--use-pam <boolean>]
        [{--verbose | -v}]
        [{--help | -h}]

Options

--banner <path>

Specifies file name to be used as SSH warning banner that is shown before the password prompt.

--ca-signature-algorithms <string>

Specifies which algorithms are allowed for signing of certificates by certificate authorities (CAs).

--ciphers <string>

Specifies the ciphers allowed for protocol version 2.

--host-key-algorithms <string>

Specifies the protocol version 2 host key algorithms the server offers.

--ignore-rhosts <boolean>

Enables ignoring .rhosts and .shosts files.

--kex-algorithms <string>

Specifies the available KEX algorithms.

--login-grace-time <duration>

Specifies the length of time before idle log in fails.

--log-level <string>

Specifies the log level when logging messages from sshd.

--macs <string>

Specifies the available MAC algorithms.

--max-auth-tries <integer>

Specifies the maximum number of authentication attempts per connection.

--max-sessions <integer>

Specifies the maximum number of open sessions permitted per network connection.

--max-startups <integer>

Specify maximum number of unauthenticated connections.

--permit-empty-passwords <integer>

Enables empty passwords if password authentication is allowed.

--permit-root-login <boolean>

Enables root SSH login.

--port <integer>

Specifies the port sshd should listen on.

--print-motd <boolean>

Enables printing /etc/motd when a user logs in.

--pubkey-accepted-key-types <string>

Specifies the accepted public key types.

--strict-modes <boolean>

Specifies if sshd should check home directory permissions before accepting login.

--subsystem <string>

Specifies an external subsystem.

--syslog-facility <string>

Specifies the facility code when logging messages from sshd.

--tcp-keep-alive <boolean>

Enables sending TCP keep alive messages.

--auth-settings-template password | publickey | both | any | custom

Specifies the supported method by which a user is authenticated.

--authentication-methods <string>

Specifies the authentication methods that must be successfully completed for a user to be granted access.

--challenge-response-authentication <boolean>

Specifies whether challenge-response authentication is allowed.

--keyboard-interactive-authentication <boolean>

Specifies whether to allow keyboard-interactive authentication.

--match <string>

Specifies match blocks.

--password-authentication <boolean>

Specifies whether password authentication is allowed.

--pubkey-authentication <boolean>

Specifies whether public key authentication is allowed.

--use-dns <boolean>

Specifies whether sshd should look up the remote host name, and to check that the resolved host name for the remote IP address maps back to the very same IP address.

--use-pam <boolean>

Enables the Pluggable Authentication Module interface.

--verbose | -v

Displays more detailed information.

--help | -h

Displays help for this command.

Argument formats

<duration> : Duration expressed as an <integer>[YMWDHms]

<path> : An absolute path within the /ifs file system.