summaryrefslogtreecommitdiff
path: root/ssh-agent.0
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-agent.0')
-rw-r--r--ssh-agent.019
1 files changed, 10 insertions, 9 deletions
diff --git a/ssh-agent.0 b/ssh-agent.0
index 689942c7a..c178dcd01 100644
--- a/ssh-agent.0
+++ b/ssh-agent.0
@@ -18,7 +18,7 @@ DESCRIPTION
18 The options are as follows: 18 The options are as follows:
19 19
20 -a bind_address 20 -a bind_address
21 Bind the agent to the unix-domain socket bind_address. The de- 21 Bind the agent to the UNIX-domain socket bind_address. The de-
22 fault is /tmp/ssh-XXXXXXXXXX/agent.<ppid>. 22 fault is /tmp/ssh-XXXXXXXXXX/agent.<ppid>.
23 23
24 -c Generate C-shell commands on stdout. This is the default if 24 -c Generate C-shell commands on stdout. This is the default if
@@ -46,11 +46,12 @@ DESCRIPTION
46 The agent initially does not have any private keys. Keys are added using 46 The agent initially does not have any private keys. Keys are added using
47 ssh-add(1). When executed without arguments, ssh-add(1) adds the files 47 ssh-add(1). When executed without arguments, ssh-add(1) adds the files
48 ~/.ssh/id_rsa, ~/.ssh/id_dsa and ~/.ssh/identity. If the identity has a 48 ~/.ssh/id_rsa, ~/.ssh/id_dsa and ~/.ssh/identity. If the identity has a
49 passphrase, ssh-add(1) asks for the passphrase (using a small X11 appli- 49 passphrase, ssh-add(1) asks for the passphrase on the terminal if it has
50 cation if running under X11, or from the terminal if running without X). 50 one or from a small X11 program if running under X11. If neither of
51 It then sends the identity to the agent. Several identities can be 51 these is the case then the authentication will fail. It then sends the
52 stored in the agent; the agent can automatically use any of these identi- 52 identity to the agent. Several identities can be stored in the agent;
53 ties. ssh-add -l displays the identities currently held by the agent. 53 the agent can automatically use any of these identities. ssh-add -l dis-
54 plays the identities currently held by the agent.
54 55
55 The idea is that the agent is run in the user's local PC, laptop, or ter- 56 The idea is that the agent is run in the user's local PC, laptop, or ter-
56 minal. Authentication data need not be stored on any other machine, and 57 minal. Authentication data need not be stored on any other machine, and
@@ -75,7 +76,7 @@ DESCRIPTION
75 agent, and the result will be returned to the requester. This way, pri- 76 agent, and the result will be returned to the requester. This way, pri-
76 vate keys are not exposed to clients using the agent. 77 vate keys are not exposed to clients using the agent.
77 78
78 A unix-domain socket is created and the name of this socket is stored in 79 A UNIX-domain socket is created and the name of this socket is stored in
79 the SSH_AUTH_SOCK environment variable. The socket is made accessible 80 the SSH_AUTH_SOCK environment variable. The socket is made accessible
80 only to the current user. This method is easily abused by root or anoth- 81 only to the current user. This method is easily abused by root or anoth-
81 er instance of the same user. 82 er instance of the same user.
@@ -99,7 +100,7 @@ FILES
99 the user. 100 the user.
100 101
101 /tmp/ssh-XXXXXXXXXX/agent.<ppid> 102 /tmp/ssh-XXXXXXXXXX/agent.<ppid>
102 Unix-domain sockets used to contain the connection to the authen- 103 UNIX-domain sockets used to contain the connection to the authen-
103 tication agent. These sockets should only be readable by the 104 tication agent. These sockets should only be readable by the
104 owner. The sockets should get automatically removed when the 105 owner. The sockets should get automatically removed when the
105 agent exits. 106 agent exits.
@@ -114,4 +115,4 @@ AUTHORS
114 ated OpenSSH. Markus Friedl contributed the support for SSH protocol 115 ated OpenSSH. Markus Friedl contributed the support for SSH protocol
115 versions 1.5 and 2.0. 116 versions 1.5 and 2.0.
116 117
117OpenBSD 4.6 March 26, 2009 2 118OpenBSD 4.6 January 17, 2010 2