version 1.88, 2010/03/08 00:28:55 |
version 1.89, 2010/03/08 09:41:27 |
|
|
section for details. |
section for details. |
The constraints that are valid for user certificates are: |
The constraints that are valid for user certificates are: |
.Bl -tag -width Ds |
.Bl -tag -width Ds |
.It Ic no-x11-forwarding |
.It Ic clear |
Disable X11 forwarding (permitted by default). |
Clear all enabled permissions. |
|
This is useful for clearing the default set of permissions so permissions may |
|
be added individually. |
|
.It Ic force-command Ns = Ns Ar command |
|
Forces the execution of |
|
.Ar command |
|
instead of any shell or command specified by the user when |
|
the certificate is used for authentication. |
.It Ic no-agent-forwarding |
.It Ic no-agent-forwarding |
Disable |
Disable |
.Xr ssh-agent 1 |
.Xr ssh-agent 1 |
|
|
by |
by |
.Xr sshd 8 |
.Xr sshd 8 |
(permitted by default). |
(permitted by default). |
.It Ic clear |
.It Ic no-x11-forwarding |
Clear all enabled permissions. |
Disable X11 forwarding (permitted by default). |
This is useful for clearing the default set of permissions so permissions may |
|
be added individually. |
|
.It Ic permit-x11-forwarding |
|
Allows X11 forwarding. |
|
.It Ic permit-agent-forwarding |
.It Ic permit-agent-forwarding |
Allows |
Allows |
.Xr ssh-agent 1 |
.Xr ssh-agent 1 |
|
|
.Pa ~/.ssh/rc |
.Pa ~/.ssh/rc |
by |
by |
.Xr sshd 8 . |
.Xr sshd 8 . |
.It Ic force-command=command |
.It Ic permit-x11-forwarding |
Forces the execution of |
Allows X11 forwarding. |
.Ar command |
.It Ic source-address Ns = Ns Ar address_list |
instead of any shell or command specified by the user when |
|
the certificate is used for authentication. |
|
.It Ic source-address=address_list |
|
Restrict the source addresses from which the certificate is considered valid |
Restrict the source addresses from which the certificate is considered valid |
from. |
from. |
The |
The |