summaryrefslogtreecommitdiff
path: root/ssh_config.5
diff options
context:
space:
mode:
Diffstat (limited to 'ssh_config.5')
-rw-r--r--ssh_config.534
1 files changed, 33 insertions, 1 deletions
diff --git a/ssh_config.5 b/ssh_config.5
index 5d76c6d2d..e72919a89 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -529,11 +529,43 @@ Specifies whether user authentication based on GSSAPI is allowed.
529The default is 529The default is
530.Dq no . 530.Dq no .
531Note that this option applies to protocol version 2 only. 531Note that this option applies to protocol version 2 only.
532.It Cm GSSAPIKeyExchange
533Specifies whether key exchange based on GSSAPI may be used. When using
534GSSAPI key exchange the server need not have a host key.
535The default is
536.Dq no .
537Note that this option applies to protocol version 2 only.
538.It Cm GSSAPIClientIdentity
539If set, specifies the GSSAPI client identity that ssh should use when
540connecting to the server. The default is unset, which means that the default
541identity will be used.
542.It Cm GSSAPIServerIdentity
543If set, specifies the GSSAPI server identity that ssh should expect when
544connecting to the server. The default is unset, which means that the
545expected GSSAPI server identity will be determined from the target
546hostname.
532.It Cm GSSAPIDelegateCredentials 547.It Cm GSSAPIDelegateCredentials
533Forward (delegate) credentials to the server. 548Forward (delegate) credentials to the server.
534The default is 549The default is
535.Dq no . 550.Dq no .
536Note that this option applies to protocol version 2 only. 551Note that this option applies to protocol version 2 connections using GSSAPI.
552.It Cm GSSAPIRenewalForcesRekey
553If set to
554.Dq yes
555then renewal of the client's GSSAPI credentials will force the rekeying of the
556ssh connection. With a compatible server, this can delegate the renewed
557credentials to a session on the server.
558The default is
559.Dq no .
560.It Cm GSSAPITrustDns
561Set to
562.Dq yes to indicate that the DNS is trusted to securely canonicalize
563the name of the host being connected to. If
564.Dq no, the hostname entered on the
565command line will be passed untouched to the GSSAPI library.
566The default is
567.Dq no .
568This option only applies to protocol version 2 connections using GSSAPI.
537.It Cm HashKnownHosts 569.It Cm HashKnownHosts
538Indicates that 570Indicates that
539.Xr ssh 1 571.Xr ssh 1