diff options
author | Damien Miller <djm@mindrot.org> | 2000-05-09 11:02:59 +1000 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2000-05-09 11:02:59 +1000 |
commit | 30c3d429306bb4afe71c18db92816b981f7b6d9d (patch) | |
tree | a65f45e0073cb55ad42957a36b4636ff21405108 /sshd.8 | |
parent | 61e50f10c276009bf9472fdd797bf6be60fc2a83 (diff) |
- OpenBSD CVS update
- markus@cvs.openbsd.org
[cipher.h myproposal.h readconf.c readconf.h servconf.c ssh.1 ssh.c]
[ssh.h sshconnect1.c sshconnect2.c sshd.8]
- complain about invalid ciphers in SSH1 (e.g. arcfour is SSH2 only)
- hugh@cvs.openbsd.org
[ssh.1]
- zap typo
[ssh-keygen.1]
- One last nit fix. (markus approved)
[sshd.8]
- some markus certified spelling adjustments
- markus@cvs.openbsd.org
[auth2.c channels.c clientloop.c compat compat.h dsa.c kex.c]
[sshconnect2.c ]
- bug compat w/ ssh-2.0.13 x11, split out bugs
[nchan.c]
- no drain if ibuf_empty, fixes x11fwd problems; tests by fries@
[ssh-keygen.c]
- handle escapes in real and original key format, ok millert@
[version.h]
- OpenSSH-2.1
Diffstat (limited to 'sshd.8')
-rw-r--r-- | sshd.8 | 18 |
1 files changed, 9 insertions, 9 deletions
@@ -9,7 +9,7 @@ | |||
9 | .\" | 9 | .\" |
10 | .\" Created: Sat Apr 22 21:55:14 1995 ylo | 10 | .\" Created: Sat Apr 22 21:55:14 1995 ylo |
11 | .\" | 11 | .\" |
12 | .\" $Id: sshd.8,v 1.21 2000/05/07 02:03:20 damien Exp $ | 12 | .\" $Id: sshd.8,v 1.22 2000/05/09 01:03:03 damien Exp $ |
13 | .\" | 13 | .\" |
14 | .Dd September 25, 1999 | 14 | .Dd September 25, 1999 |
15 | .Dt SSHD 8 | 15 | .Dt SSHD 8 |
@@ -115,7 +115,7 @@ Blowfish, 3DES or CAST128 in CBC mode or Arcfour. | |||
115 | The client selects the encryption algorithm | 115 | The client selects the encryption algorithm |
116 | to use from those offered by the server. | 116 | to use from those offered by the server. |
117 | Additionally, session integrity is provided | 117 | Additionally, session integrity is provided |
118 | through a crytographic message authentication code | 118 | through a cryptographic message authentication code |
119 | (hmac-sha1 or hmac-md5). | 119 | (hmac-sha1 or hmac-md5). |
120 | .Pp | 120 | .Pp |
121 | Protocol version 2 provides a public key based | 121 | Protocol version 2 provides a public key based |
@@ -277,7 +277,7 @@ By default login is allowed regardless of the user name. | |||
277 | Specifies the ciphers allowed for protocol version 2. | 277 | Specifies the ciphers allowed for protocol version 2. |
278 | Multiple ciphers must be comma-separated. | 278 | Multiple ciphers must be comma-separated. |
279 | The default is | 279 | The default is |
280 | .Dq blowfish-cbc,3des-cbc,arcfour,cast128-cbc . | 280 | .Dq 3des-cbc,blowfish-cbc,arcfour,cast128-cbc . |
281 | .It Cm CheckMail | 281 | .It Cm CheckMail |
282 | Specifies whether | 282 | Specifies whether |
283 | .Nm | 283 | .Nm |
@@ -327,14 +327,14 @@ Specifies the file containing the private DSA host key (default | |||
327 | used by SSH protocol 2.0. | 327 | used by SSH protocol 2.0. |
328 | Note that | 328 | Note that |
329 | .Nm | 329 | .Nm |
330 | disables protcol 2.0 if this file is group/world-accessible. | 330 | disables protocol 2.0 if this file is group/world-accessible. |
331 | .It Cm HostKey | 331 | .It Cm HostKey |
332 | Specifies the file containing the private RSA host key (default | 332 | Specifies the file containing the private RSA host key (default |
333 | .Pa /etc/ssh_host_key ) | 333 | .Pa /etc/ssh_host_key ) |
334 | used by SSH protocols 1.3 and 1.5. | 334 | used by SSH protocols 1.3 and 1.5. |
335 | Note that | 335 | Note that |
336 | .Nm | 336 | .Nm |
337 | disables protcols 1.3 and 1.5 if this file is group/world-accessible. | 337 | disables protocols 1.3 and 1.5 if this file is group/world-accessible. |
338 | .It Cm IgnoreRhosts | 338 | .It Cm IgnoreRhosts |
339 | Specifies that | 339 | Specifies that |
340 | .Pa .rhosts | 340 | .Pa .rhosts |
@@ -364,7 +364,7 @@ of the machines will be properly noticed. | |||
364 | However, this means that | 364 | However, this means that |
365 | connections will die if the route is down temporarily, and some people | 365 | connections will die if the route is down temporarily, and some people |
366 | find it annoying. | 366 | find it annoying. |
367 | On the other hand, if keepalives are not send, | 367 | On the other hand, if keepalives are not sent, |
368 | sessions may hang indefinitely on the server, leaving | 368 | sessions may hang indefinitely on the server, leaving |
369 | .Dq ghost | 369 | .Dq ghost |
370 | users and consuming server resources. | 370 | users and consuming server resources. |
@@ -620,7 +620,7 @@ The | |||
620 | .Pa $HOME/.ssh/authorized_keys | 620 | .Pa $HOME/.ssh/authorized_keys |
621 | file lists the RSA keys that are | 621 | file lists the RSA keys that are |
622 | permitted for RSA authentication in SSH protocols 1.3 and 1.5 | 622 | permitted for RSA authentication in SSH protocols 1.3 and 1.5 |
623 | Similarily, the | 623 | Similarly, the |
624 | .Pa $HOME/.ssh/authorized_keys2 | 624 | .Pa $HOME/.ssh/authorized_keys2 |
625 | file lists the DSA keys that are | 625 | file lists the DSA keys that are |
626 | permitted for DSA authentication in SSH protocol 2.0. | 626 | permitted for DSA authentication in SSH protocol 2.0. |
@@ -679,8 +679,8 @@ A quote may be included in the command by quoting it with a backslash. | |||
679 | This option might be useful | 679 | This option might be useful |
680 | to restrict certain RSA keys to perform just a specific operation. | 680 | to restrict certain RSA keys to perform just a specific operation. |
681 | An example might be a key that permits remote backups but nothing else. | 681 | An example might be a key that permits remote backups but nothing else. |
682 | Notice that the client may specify TCP/IP and/or X11 | 682 | Note that the client may specify TCP/IP and/or X11 |
683 | forwardings unless they are explicitly prohibited. | 683 | forwarding unless they are explicitly prohibited. |
684 | .It Cm environment="NAME=value" | 684 | .It Cm environment="NAME=value" |
685 | Specifies that the string is to be added to the environment when | 685 | Specifies that the string is to be added to the environment when |
686 | logging in using this key. | 686 | logging in using this key. |