diff options
Diffstat (limited to 'sshd_config.5')
| -rw-r--r-- | sshd_config.5 | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/sshd_config.5 b/sshd_config.5 index 2ac0a5ff3..f8aa0f2f3 100644 --- a/sshd_config.5 +++ b/sshd_config.5 | |||
| @@ -34,7 +34,7 @@ | |||
| 34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF | 34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| 35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 36 | .\" | 36 | .\" |
| 37 | .\" $OpenBSD: sshd_config.5,v 1.31 2004/04/28 05:17:10 djm Exp $ | 37 | .\" $OpenBSD: sshd_config.5,v 1.32 2004/04/28 07:02:56 jmc Exp $ |
| 38 | .Dd September 25, 1999 | 38 | .Dd September 25, 1999 |
| 39 | .Dt SSHD_CONFIG 5 | 39 | .Dt SSHD_CONFIG 5 |
| 40 | .Os | 40 | .Os |
| @@ -83,7 +83,6 @@ Be warned that some environment variables could be used to bypass restricted | |||
| 83 | user environments. | 83 | user environments. |
| 84 | For this reason, care should be taken in the use of this directive. | 84 | For this reason, care should be taken in the use of this directive. |
| 85 | The default is not to accept any environment variables. | 85 | The default is not to accept any environment variables. |
| 86 | .Pp | ||
| 87 | .It Cm AllowGroups | 86 | .It Cm AllowGroups |
| 88 | This keyword can be followed by a list of group name patterns, separated | 87 | This keyword can be followed by a list of group name patterns, separated |
| 89 | by spaces. | 88 | by spaces. |
| @@ -96,7 +95,6 @@ can be used as | |||
| 96 | wildcards in the patterns. | 95 | wildcards in the patterns. |
| 97 | Only group names are valid; a numerical group ID is not recognized. | 96 | Only group names are valid; a numerical group ID is not recognized. |
| 98 | By default, login is allowed for all groups. | 97 | By default, login is allowed for all groups. |
| 99 | .Pp | ||
| 100 | .It Cm AllowTcpForwarding | 98 | .It Cm AllowTcpForwarding |
| 101 | Specifies whether TCP forwarding is permitted. | 99 | Specifies whether TCP forwarding is permitted. |
| 102 | The default is | 100 | The default is |
| @@ -104,7 +102,6 @@ The default is | |||
| 104 | Note that disabling TCP forwarding does not improve security unless | 102 | Note that disabling TCP forwarding does not improve security unless |
| 105 | users are also denied shell access, as they can always install their | 103 | users are also denied shell access, as they can always install their |
| 106 | own forwarders. | 104 | own forwarders. |
| 107 | .Pp | ||
| 108 | .It Cm AllowUsers | 105 | .It Cm AllowUsers |
| 109 | This keyword can be followed by a list of user name patterns, separated | 106 | This keyword can be followed by a list of user name patterns, separated |
| 110 | by spaces. | 107 | by spaces. |
| @@ -120,7 +117,6 @@ By default, login is allowed for all users. | |||
| 120 | If the pattern takes the form USER@HOST then USER and HOST | 117 | If the pattern takes the form USER@HOST then USER and HOST |
| 121 | are separately checked, restricting logins to particular | 118 | are separately checked, restricting logins to particular |
| 122 | users from particular hosts. | 119 | users from particular hosts. |
| 123 | .Pp | ||
| 124 | .It Cm AuthorizedKeysFile | 120 | .It Cm AuthorizedKeysFile |
| 125 | Specifies the file that contains the public keys that can be used | 121 | Specifies the file that contains the public keys that can be used |
| 126 | for user authentication. | 122 | for user authentication. |
| @@ -143,7 +139,6 @@ The contents of the specified file are sent to the remote user before | |||
| 143 | authentication is allowed. | 139 | authentication is allowed. |
| 144 | This option is only available for protocol version 2. | 140 | This option is only available for protocol version 2. |
| 145 | By default, no banner is displayed. | 141 | By default, no banner is displayed. |
| 146 | .Pp | ||
| 147 | .It Cm ChallengeResponseAuthentication | 142 | .It Cm ChallengeResponseAuthentication |
| 148 | Specifies whether challenge response authentication is allowed. | 143 | Specifies whether challenge response authentication is allowed. |
| 149 | All authentication styles from | 144 | All authentication styles from |
| @@ -155,7 +150,6 @@ The default is | |||
| 155 | Specifies the ciphers allowed for protocol version 2. | 150 | Specifies the ciphers allowed for protocol version 2. |
| 156 | Multiple ciphers must be comma-separated. | 151 | Multiple ciphers must be comma-separated. |
| 157 | The default is | 152 | The default is |
| 158 | .Pp | ||
| 159 | .Bd -literal | 153 | .Bd -literal |
| 160 | ``aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour, | 154 | ``aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour, |
| 161 | aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr'' | 155 | aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr'' |
| @@ -216,7 +210,6 @@ can be used as | |||
| 216 | wildcards in the patterns. | 210 | wildcards in the patterns. |
| 217 | Only group names are valid; a numerical group ID is not recognized. | 211 | Only group names are valid; a numerical group ID is not recognized. |
| 218 | By default, login is allowed for all groups. | 212 | By default, login is allowed for all groups. |
| 219 | .Pp | ||
| 220 | .It Cm DenyUsers | 213 | .It Cm DenyUsers |
| 221 | This keyword can be followed by a list of user name patterns, separated | 214 | This keyword can be followed by a list of user name patterns, separated |
| 222 | by spaces. | 215 | by spaces. |