version 1.406, 2019/11/18 23:16:49 |
version 1.407, 2019/11/28 12:24:31 |
|
|
to use IPv6 addresses only. |
to use IPv6 addresses only. |
.Pp |
.Pp |
.It Fl A |
.It Fl A |
Enables forwarding of the authentication agent connection. |
Enables forwarding of connections from an authentication agent such as |
|
.Xr ssh-agent 1 . |
This can also be specified on a per-host basis in a configuration file. |
This can also be specified on a per-host basis in a configuration file. |
.Pp |
.Pp |
Agent forwarding should be enabled with caution. |
Agent forwarding should be enabled with caution. |
|
|
An attacker cannot obtain key material from the agent, |
An attacker cannot obtain key material from the agent, |
however they can perform operations on the keys that enable them to |
however they can perform operations on the keys that enable them to |
authenticate using the identities loaded into the agent. |
authenticate using the identities loaded into the agent. |
|
A safer alternative may be to use a jump host |
|
(see |
|
.Fl J ) . |
.Pp |
.Pp |
.It Fl a |
.It Fl a |
Disables forwarding of the authentication agent connection. |
Disables forwarding of the authentication agent connection. |