summaryrefslogtreecommitdiff
path: root/ssh_config.5
diff options
context:
space:
mode:
Diffstat (limited to 'ssh_config.5')
-rw-r--r--ssh_config.540
1 files changed, 27 insertions, 13 deletions
diff --git a/ssh_config.5 b/ssh_config.5
index 76e451079..0ce851aa8 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -34,8 +34,8 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: ssh_config.5,v 1.119 2009/02/22 23:50:57 djm Exp $ 37.\" $OpenBSD: ssh_config.5,v 1.129 2010/03/05 10:28:21 djm Exp $
38.Dd $Mdocdate: February 22 2009 $ 38.Dd $Mdocdate: March 5 2010 $
39.Dt SSH_CONFIG 5 39.Dt SSH_CONFIG 5
40.Os 40.Os
41.Sh NAME 41.Sh NAME
@@ -610,6 +610,12 @@ and
610for protocol version 2. 610for protocol version 2.
611Additionally, any identities represented by the authentication agent 611Additionally, any identities represented by the authentication agent
612will be used for authentication. 612will be used for authentication.
613.Xr ssh 1
614will try to load certificate information from the filename obtained by
615appending
616.Pa -cert.pub
617to the path of a specified
618.Cm IdentityFile .
613.Pp 619.Pp
614The file name may use the tilde 620The file name may use the tilde
615syntax to refer to a user's home directory or one of the following 621syntax to refer to a user's home directory or one of the following
@@ -667,6 +673,13 @@ The following escape character substitutions will be performed:
667(remote user name) or 673(remote user name) or
668.Ql %u 674.Ql %u
669(local user name). 675(local user name).
676.Pp
677The command is run synchronously and does not have access to the
678session of the
679.Xr ssh 1
680that spawned it.
681It should not be used for interactive commands.
682.Pp
670This directive is ignored unless 683This directive is ignored unless
671.Cm PermitLocalCommand 684.Cm PermitLocalCommand
672has been enabled. 685has been enabled.
@@ -755,6 +768,12 @@ or
755.Dq no . 768.Dq no .
756The default is 769The default is
757.Dq no . 770.Dq no .
771.It Cm PKCS11Provider
772Specifies which PKCS#11 provider to use.
773The argument to this keyword is the PKCS#11 shared libary
774.Xr ssh 1
775should use to communicate with a PKCS#11 token providing the user's
776private RSA key.
758.It Cm Port 777.It Cm Port
759Specifies the port number to connect on the remote host. 778Specifies the port number to connect on the remote host.
760The default is 22. 779The default is 22.
@@ -781,11 +800,13 @@ The possible values are
781and 800and
782.Sq 2 . 801.Sq 2 .
783Multiple versions must be comma-separated. 802Multiple versions must be comma-separated.
784The default is 803When this option is set to
785.Dq 2,1 . 804.Dq 2,1
786This means that ssh 805.Nm ssh
787tries version 2 and falls back to version 1 806will try version 2 and fall back to version 1
788if version 2 is not available. 807if version 2 is not available.
808The default is
809.Sq 2 .
789.It Cm ProxyCommand 810.It Cm ProxyCommand
790Specifies the command to use to connect to the server. 811Specifies the command to use to connect to the server.
791The command 812The command
@@ -979,13 +1000,6 @@ This option applies to protocol version 2 only.
979and 1000and
980.Cm SetupTimeOut 1001.Cm SetupTimeOut
981are Debian-specific compatibility aliases for this option. 1002are Debian-specific compatibility aliases for this option.
982.It Cm SmartcardDevice
983Specifies which smartcard device to use.
984The argument to this keyword is the device
985.Xr ssh 1
986should use to communicate with a smartcard used for storing the user's
987private RSA key.
988By default, no device is specified and smartcard support is not activated.
989.It Cm StrictHostKeyChecking 1003.It Cm StrictHostKeyChecking
990If this flag is set to 1004If this flag is set to
991.Dq yes , 1005.Dq yes ,