summaryrefslogtreecommitdiff
path: root/sshd.8
diff options
context:
space:
mode:
authorBen Lindstrom <mouring@eviladmin.org>2001-09-12 18:35:30 +0000
committerBen Lindstrom <mouring@eviladmin.org>2001-09-12 18:35:30 +0000
commit594e20389490bf91724dc903cb9aaa92d037b7a4 (patch)
tree8bcf855dccd896ee87ae815aeeb80f87d6035e08 /sshd.8
parentedc0cf26d11d708320ade92e066d4f3e84e20112 (diff)
- deraadt@cvs.openbsd.org 2001/09/05 06:23:07
[scp.1 sftp.1 ssh.1 ssh-agent.1 sshd.8 ssh-keygen.1 ssh-keyscan.1] avoid first person in manual pages
Diffstat (limited to 'sshd.8')
-rw-r--r--sshd.826
1 files changed, 13 insertions, 13 deletions
diff --git a/sshd.8 b/sshd.8
index 97de98cca..35aa362cf 100644
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: sshd.8,v 1.146 2001/08/30 20:36:34 stevesk Exp $ 37.\" $OpenBSD: sshd.8,v 1.147 2001/09/05 06:23:07 deraadt Exp $
38.Dd September 25, 1999 38.Dd September 25, 1999
39.Dt SSHD 8 39.Dt SSHD 8
40.Os 40.Os
@@ -325,7 +325,7 @@ and
325.Ql ? 325.Ql ?
326can be used as 326can be used as
327wildcards in the patterns. 327wildcards in the patterns.
328Only group names are valid; a numerical group ID isn't recognized. 328Only group names are valid; a numerical group ID is not recognized.
329By default login is allowed regardless of the group list. 329By default login is allowed regardless of the group list.
330.Pp 330.Pp
331.It Cm AllowTcpForwarding 331.It Cm AllowTcpForwarding
@@ -346,10 +346,10 @@ and
346.Ql ? 346.Ql ?
347can be used as 347can be used as
348wildcards in the patterns. 348wildcards in the patterns.
349Only user names are valid; a numerical user ID isn't recognized. 349Only user names are valid; a numerical user ID is not recognized.
350By default login is allowed regardless of the user name. 350By default login is allowed regardless of the user name.
351If the pattern takes the form USER@HOST then USER and HOST 351If the pattern takes the form USER@HOST then USER and HOST
352are separately checked, allowing you to restrict logins to particular 352are separately checked, restricting logins to particular
353users from particular hosts. 353users from particular hosts.
354.Pp 354.Pp
355.It Cm AuthorizedKeysFile 355.It Cm AuthorizedKeysFile
@@ -408,13 +408,13 @@ to note that the use of client alive messages is very different from
408encrypted channel and therefore will not be spoofable. The TCP keepalive 408encrypted channel and therefore will not be spoofable. The TCP keepalive
409option enabled by 409option enabled by
410.Cm Keepalive 410.Cm Keepalive
411is spoofable. You want to use the client 411is spoofable. The client alive mechanism is valuable when the client or
412alive mechanism when you are basing something important on 412server depend on knowing when a connection has become inactive.
413clients having an active connection to the server.
414.Pp 413.Pp
415The default value is 3. If you set 414The default value is 3. If
416.Cm ClientAliveInterval 415.Cm ClientAliveInterval
417(above) to 15, and leave this value at the default, unresponsive ssh clients 416(above) is set to 15, and
417.Cm Keepalive is left at the default, unresponsive ssh clients
418will be disconnected after approximately 45 seconds. 418will be disconnected after approximately 45 seconds.
419.It Cm DenyGroups 419.It Cm DenyGroups
420This keyword can be followed by a number of group names, separated 420This keyword can be followed by a number of group names, separated
@@ -426,7 +426,7 @@ and
426.Ql ? 426.Ql ?
427can be used as 427can be used as
428wildcards in the patterns. 428wildcards in the patterns.
429Only group names are valid; a numerical group ID isn't recognized. 429Only group names are valid; a numerical group ID is not recognized.
430By default login is allowed regardless of the group list. 430By default login is allowed regardless of the group list.
431.Pp 431.Pp
432.It Cm DenyUsers 432.It Cm DenyUsers
@@ -437,7 +437,7 @@ Login is disallowed for user names that match one of the patterns.
437and 437and
438.Ql ? 438.Ql ?
439can be used as wildcards in the patterns. 439can be used as wildcards in the patterns.
440Only user names are valid; a numerical user ID isn't recognized. 440Only user names are valid; a numerical user ID is not recognized.
441By default login is allowed regardless of the user name. 441By default login is allowed regardless of the user name.
442.It Cm GatewayPorts 442.It Cm GatewayPorts
443Specifies whether remote hosts are allowed to connect to ports 443Specifies whether remote hosts are allowed to connect to ports
@@ -998,8 +998,8 @@ authentication.
998The command supplied by the user (if any) is ignored. 998The command supplied by the user (if any) is ignored.
999The command is run on a pty if the connection requests a pty; 999The command is run on a pty if the connection requests a pty;
1000otherwise it is run without a tty. 1000otherwise it is run without a tty.
1001Note that if you want a 8-bit clean channel, 1001If a 8-bit clean channel is required,
1002you must not request a pty or should specify 1002one must not request a pty or should specify
1003.Cm no-pty . 1003.Cm no-pty .
1004A quote may be included in the command by quoting it with a backslash. 1004A quote may be included in the command by quoting it with a backslash.
1005This option might be useful 1005This option might be useful