src/usr.bin/ssh/ssh.1 - diff

Return to ssh.1 CVS log

Up to [local] / src / usr.bin / ssh

version 1.114, 2001/06/22 10:17:51

version 1.115, 2001/06/22 21:55:49

Line 224

.Pa $HOME/.ssh/id_rsa ,

to sign the session identifier and sends the result to the server.

The server checks whether the matching public key is listed in

.Pa $HOME/.ssh/authorized_keys2

.Pa $HOME/.ssh/authorized_keys

and grants access if both the key is found and the signature is correct.

The session identifier is derived from a shared Diffie-Hellman value

and is only known to the client and the server.

Line 1224

and

.Pa $HOME/.ssh/id_rsa.pub

file should be added to

.Pa $HOME/.ssh/authorized_keys2

.Pa $HOME/.ssh/authorized_keys

on all machines

where you wish to log in using protocol version 2 DSA/RSA authentication.

These files are not

Line 1242

but the recommended permissions are read/write for the user, and not

accessible by others.

.It Pa $HOME/.ssh/authorized_keys

Lists the RSA keys that can be used for logging in as this user.

Lists the public keys (RSA/DSA) that can be used for logging in as this user.

The format of this file is described in the

.Xr sshd 8

manual page.

In the simplest form the format is the same as the .pub

identity files (that is, each line contains the number of bits in

modulus, public exponent, modulus, and comment fields, separated by

spaces).

This file is not highly sensitive, but the recommended

permissions are read/write for the user, and not accessible by others.

.It Pa $HOME/.ssh/authorized_keys2

Lists the public keys (RSA/DSA) that can be used for logging in as this user.

This file is not highly sensitive, but the recommended

permissions are read/write for the user, and not accessible by others.

.It Pa /etc/ssh_known_hosts, /etc/ssh_known_hosts2