summaryrefslogtreecommitdiff
path: root/sshd.8
diff options
context:
space:
mode:
authorBen Lindstrom <mouring@eviladmin.org>2001-06-25 05:08:11 +0000
committerBen Lindstrom <mouring@eviladmin.org>2001-06-25 05:08:11 +0000
commit2464322d7ee41dcd8beee12903775f7f2a80a164 (patch)
tree211b60ad7793b335208f5e53d9cf97c6725f558d /sshd.8
parente586c4ce3f4af32ef9eed72344f0fc7f43b9e58a (diff)
- itojun@cvs.openbsd.org 2001/06/23 17:48:18
[sftp.1 ssh.1 sshd.8 ssh-keyscan.1] kill whitespace at EOL.
Diffstat (limited to 'sshd.8')
-rw-r--r--sshd.830
1 files changed, 15 insertions, 15 deletions
diff --git a/sshd.8 b/sshd.8
index d049fceaa..e143e84d4 100644
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: sshd.8,v 1.132 2001/06/23 03:03:59 markus Exp $ 37.\" $OpenBSD: sshd.8,v 1.133 2001/06/23 17:48:19 itojun Exp $
38.Dd September 25, 1999 38.Dd September 25, 1999
39.Dt SSHD 8 39.Dt SSHD 8
40.Os 40.Os
@@ -374,7 +374,7 @@ The default is
374.Dq aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour. 374.Dq aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour.
375.It Cm ClientAliveInterval 375.It Cm ClientAliveInterval
376Sets a timeout interval in seconds after which if no data has been received 376Sets a timeout interval in seconds after which if no data has been received
377from the client, 377from the client,
378.Nm 378.Nm
379will send a message through the encrypted 379will send a message through the encrypted
380channel to request a response from the client. 380channel to request a response from the client.
@@ -386,10 +386,10 @@ Sets the number of client alive messages (see above) which may be
386sent without 386sent without
387.Nm 387.Nm
388receiving any messages back from the client. If this threshold is 388receiving any messages back from the client. If this threshold is
389reached while client alive messages are being sent, 389reached while client alive messages are being sent,
390.Nm 390.Nm
391will disconnect the client, terminating the session. It is important 391will disconnect the client, terminating the session. It is important
392to note that the use of client alive messages is very different from 392to note that the use of client alive messages is very different from
393.Cm Keepalive 393.Cm Keepalive
394(below). The client alive messages are sent through the 394(below). The client alive messages are sent through the
395encrypted channel and therefore will not be spoofable. The TCP keepalive 395encrypted channel and therefore will not be spoofable. The TCP keepalive
@@ -402,7 +402,7 @@ clients having an active connection to the server.
402The default value is 3. If you set 402The default value is 3. If you set
403.Cm ClientAliveInterval 403.Cm ClientAliveInterval
404(above) to 15, and leave this value at the default, unresponsive ssh clients 404(above) to 15, and leave this value at the default, unresponsive ssh clients
405will be disconnected after approximately 45 seconds. 405will be disconnected after approximately 45 seconds.
406.It Cm DenyGroups 406.It Cm DenyGroups
407This keyword can be followed by a number of group names, separated 407This keyword can be followed by a number of group names, separated
408by spaces. 408by spaces.
@@ -787,12 +787,12 @@ The default is
787Note that 787Note that
788.Xr login 1 788.Xr login 1
789is never used for remote command execution. 789is never used for remote command execution.
790Note also, that if this is enabled, 790Note also, that if this is enabled,
791.Cm X11Forwarding 791.Cm X11Forwarding
792will be disabled because 792will be disabled because
793.Xr login 1 793.Xr login 1
794does not know how to handle 794does not know how to handle
795.Xr xauth 1 795.Xr xauth 1
796cookies. 796cookies.
797.It Cm X11DisplayOffset 797.It Cm X11DisplayOffset
798Specifies the first display number available for 798Specifies the first display number available for
@@ -808,9 +808,9 @@ The default is
808.Dq no . 808.Dq no .
809Note that disabling X11 forwarding does not improve security in any 809Note that disabling X11 forwarding does not improve security in any
810way, as users can always install their own forwarders. 810way, as users can always install their own forwarders.
811X11 forwarding is automatically disabled if 811X11 forwarding is automatically disabled if
812.Cm UseLogin 812.Cm UseLogin
813is enabled. 813is enabled.
814.It Cm XAuthLocation 814.It Cm XAuthLocation
815Specifies the location of the 815Specifies the location of the
816.Xr xauth 1 816.Xr xauth 1
@@ -1005,13 +1005,13 @@ authentication.
1005.It Cm no-pty 1005.It Cm no-pty
1006Prevents tty allocation (a request to allocate a pty will fail). 1006Prevents tty allocation (a request to allocate a pty will fail).
1007.It Cm permitopen="host:port" 1007.It Cm permitopen="host:port"
1008Limit local 1008Limit local
1009.Li ``ssh -L'' 1009.Li ``ssh -L''
1010port forwarding such that it may only connect to the specified host and 1010port forwarding such that it may only connect to the specified host and
1011port. Multiple 1011port. Multiple
1012.Cm permitopen 1012.Cm permitopen
1013options may be applied separated by commas. No pattern matching is 1013options may be applied separated by commas. No pattern matching is
1014performed on the specified hostnames, they must be literal domains or 1014performed on the specified hostnames, they must be literal domains or
1015addresses. 1015addresses.
1016.El 1016.El
1017.Ss Examples 1017.Ss Examples