diff options
Diffstat (limited to 'ssh-agent.0')
-rw-r--r-- | ssh-agent.0 | 19 |
1 files changed, 10 insertions, 9 deletions
diff --git a/ssh-agent.0 b/ssh-agent.0 index 689942c7a..c178dcd01 100644 --- a/ssh-agent.0 +++ b/ssh-agent.0 | |||
@@ -18,7 +18,7 @@ DESCRIPTION | |||
18 | The options are as follows: | 18 | The options are as follows: |
19 | 19 | ||
20 | -a bind_address | 20 | -a bind_address |
21 | Bind the agent to the unix-domain socket bind_address. The de- | 21 | Bind the agent to the UNIX-domain socket bind_address. The de- |
22 | fault is /tmp/ssh-XXXXXXXXXX/agent.<ppid>. | 22 | fault is /tmp/ssh-XXXXXXXXXX/agent.<ppid>. |
23 | 23 | ||
24 | -c Generate C-shell commands on stdout. This is the default if | 24 | -c Generate C-shell commands on stdout. This is the default if |
@@ -46,11 +46,12 @@ DESCRIPTION | |||
46 | The agent initially does not have any private keys. Keys are added using | 46 | The agent initially does not have any private keys. Keys are added using |
47 | ssh-add(1). When executed without arguments, ssh-add(1) adds the files | 47 | ssh-add(1). When executed without arguments, ssh-add(1) adds the files |
48 | ~/.ssh/id_rsa, ~/.ssh/id_dsa and ~/.ssh/identity. If the identity has a | 48 | ~/.ssh/id_rsa, ~/.ssh/id_dsa and ~/.ssh/identity. If the identity has a |
49 | passphrase, ssh-add(1) asks for the passphrase (using a small X11 appli- | 49 | passphrase, ssh-add(1) asks for the passphrase on the terminal if it has |
50 | cation if running under X11, or from the terminal if running without X). | 50 | one or from a small X11 program if running under X11. If neither of |
51 | It then sends the identity to the agent. Several identities can be | 51 | these is the case then the authentication will fail. It then sends the |
52 | stored in the agent; the agent can automatically use any of these identi- | 52 | identity to the agent. Several identities can be stored in the agent; |
53 | ties. ssh-add -l displays the identities currently held by the agent. | 53 | the agent can automatically use any of these identities. ssh-add -l dis- |
54 | plays the identities currently held by the agent. | ||
54 | 55 | ||
55 | The idea is that the agent is run in the user's local PC, laptop, or ter- | 56 | The idea is that the agent is run in the user's local PC, laptop, or ter- |
56 | minal. Authentication data need not be stored on any other machine, and | 57 | minal. Authentication data need not be stored on any other machine, and |
@@ -75,7 +76,7 @@ DESCRIPTION | |||
75 | agent, and the result will be returned to the requester. This way, pri- | 76 | agent, and the result will be returned to the requester. This way, pri- |
76 | vate keys are not exposed to clients using the agent. | 77 | vate keys are not exposed to clients using the agent. |
77 | 78 | ||
78 | A unix-domain socket is created and the name of this socket is stored in | 79 | A UNIX-domain socket is created and the name of this socket is stored in |
79 | the SSH_AUTH_SOCK environment variable. The socket is made accessible | 80 | the SSH_AUTH_SOCK environment variable. The socket is made accessible |
80 | only to the current user. This method is easily abused by root or anoth- | 81 | only to the current user. This method is easily abused by root or anoth- |
81 | er instance of the same user. | 82 | er instance of the same user. |
@@ -99,7 +100,7 @@ FILES | |||
99 | the user. | 100 | the user. |
100 | 101 | ||
101 | /tmp/ssh-XXXXXXXXXX/agent.<ppid> | 102 | /tmp/ssh-XXXXXXXXXX/agent.<ppid> |
102 | Unix-domain sockets used to contain the connection to the authen- | 103 | UNIX-domain sockets used to contain the connection to the authen- |
103 | tication agent. These sockets should only be readable by the | 104 | tication agent. These sockets should only be readable by the |
104 | owner. The sockets should get automatically removed when the | 105 | owner. The sockets should get automatically removed when the |
105 | agent exits. | 106 | agent exits. |
@@ -114,4 +115,4 @@ AUTHORS | |||
114 | ated OpenSSH. Markus Friedl contributed the support for SSH protocol | 115 | ated OpenSSH. Markus Friedl contributed the support for SSH protocol |
115 | versions 1.5 and 2.0. | 116 | versions 1.5 and 2.0. |
116 | 117 | ||
117 | OpenBSD 4.6 March 26, 2009 2 | 118 | OpenBSD 4.6 January 17, 2010 2 |