[BACK]Return to ssh_config.5 CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/ssh_config.5 between version 1.29.2.2 and 1.30

version 1.29.2.2, 2005/03/10 17:15:05 version 1.30, 2004/04/19 13:02:40
Line 63 
Line 63 
 .Pp  .Pp
 For each parameter, the first obtained value  For each parameter, the first obtained value
 will be used.  will be used.
 The configuration files contain sections separated by  The configuration files contain sections bracketed by
 .Dq Host  .Dq Host
 specifications, and that section is only applied for hosts that  specifications, and that section is only applied for hosts that
 match one of the patterns given in the specification.  match one of the patterns given in the specification.
Line 120 
Line 120 
 Valid arguments are  Valid arguments are
 .Dq any ,  .Dq any ,
 .Dq inet  .Dq inet
 (use IPv4 only) or  (Use IPv4 only) or
 .Dq inet6  .Dq inet6
 (use IPv6 only).  (Use IPv6 only.)
 .It Cm BatchMode  .It Cm BatchMode
 If set to  If set to
 .Dq yes ,  .Dq yes ,
Line 185 
Line 185 
 Specifies the ciphers allowed for protocol version 2  Specifies the ciphers allowed for protocol version 2
 in order of preference.  in order of preference.
 Multiple ciphers must be comma-separated.  Multiple ciphers must be comma-separated.
 The supported ciphers are  
 .Dq 3des-cbc ,  
 .Dq aes128-cbc ,  
 .Dq aes192-cbc ,  
 .Dq aes256-cbc ,  
 .Dq aes128-ctr ,  
 .Dq aes192-ctr ,  
 .Dq aes256-ctr ,  
 .Dq arcfour ,  
 .Dq blowfish-cbc ,  
 and  
 .Dq cast128-cbc .  
 The default is  The default is
 .Bd -literal  .Bd -literal
   ``aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,    ``aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,
Line 244 
Line 232 
 server, instead of using the default system TCP timeout.  server, instead of using the default system TCP timeout.
 This value is used only when the target is down or really unreachable,  This value is used only when the target is down or really unreachable,
 not when it refuses the connection.  not when it refuses the connection.
 .It Cm ControlMaster  
 Enables the sharing of multiple sessions over a single network connection.  
 When set to  
 .Dq yes  
 .Nm ssh  
 will listen for connections on a control socket specified using the  
 .Cm ControlPath  
 argument.  
 Additional sessions can connect to this socket using the same  
 .Cm ControlPath  
 with  
 .Cm ControlMaster  
 set to  
 .Dq no  
 (the default).  
 These sessions will reuse the master instance's network connection rather  
 than initiating new ones.  
 Setting this to  
 .Dq ask  
 will cause  
 .Nm ssh  
 to listen for control connections, but require confirmation using the  
 .Ev SSH_ASKPASS  
 program before they are accepted (see  
 .Xr ssh-add 1  
 for details).  
 .It Cm ControlPath  
 Specify the path to the control socket used for connection sharing.  
 See  
 .Cm ControlMaster  
 above.  
 .It Cm DynamicForward  .It Cm DynamicForward
 Specifies that a TCP/IP port on the local machine be forwarded  Specifies that a TCP/IP port on the local machine be forwarded
 over the secure channel, and the application  over the secure channel, and the application
Line 356 
Line 313 
 .Cm ForwardX11Trusted  .Cm ForwardX11Trusted
 option is also enabled.  option is also enabled.
 .It Cm ForwardX11Trusted  .It Cm ForwardX11Trusted
 If this option is set to  If the this option is set to
 .Dq yes  .Dq yes
 then remote X11 clients will have full access to the original X11 display.  then remote X11 clients will have full access to the original X11 display.
 .Pp  
 If this option is set to  If this option is set to
 .Dq no  .Dq no
 then remote X11 clients will be considered untrusted and prevented  then remote X11 clients will be considered untrusted and prevented
 from stealing or tampering with data belonging to trusted X11  from stealing or tampering with data belonging to trusted X11
 clients.  clients.
 Furthermore, the  
 .Xr xauth 1  
 token used for the session will be set to expire after 20 minutes.  
 Remote clients will be refused access after this time.  
 .Pp  .Pp
 The default is  The default is
 .Dq no .  .Dq no .
Line 407 
Line 359 
 The default is  The default is
 .Dq no .  .Dq no .
 Note that this option applies to protocol version 2 only.  Note that this option applies to protocol version 2 only.
 .It Cm HashKnownHosts  
 Indicates that  
 .Nm ssh  
 should hash host names and addresses when they are added to  
 .Pa $HOME/.ssh/known_hosts .  
 These hashed names may be used normally by  
 .Nm ssh  
 and  
 .Nm sshd ,  
 but they do not reveal identifying information should the file's contents  
 be disclosed.  
 The default is  
 .Dq no .  
 Note that hashing of names and addresses will not be retrospectively applied  
 to existing known hosts files, but these may be manually hashed using  
 .Xr ssh-keygen 1 .  
 .It Cm HostbasedAuthentication  .It Cm HostbasedAuthentication
 Specifies whether to try rhosts based authentication with public key  Specifies whether to try rhosts based authentication with public key
 authentication.  authentication.
Line 474 
Line 410 
 Specifies that  Specifies that
 .Nm ssh  .Nm ssh
 should only use the authentication identity files configured in the  should only use the authentication identity files configured in the
 .Nm  .Nm
 files,  files,
 even if the  even if the
 .Nm ssh-agent  .Nm ssh-agent
Line 488 
Line 424 
 offers many different identities.  offers many different identities.
 The default is  The default is
 .Dq no .  .Dq no .
 .It Cm KbdInteractiveDevices  
 Specifies the list of methods to use in keyboard-interactive authentication.  
 Multiple method names must be comma-separated.  
 The default is to use the server specified list.  
 .It Cm LocalForward  .It Cm LocalForward
 Specifies that a TCP/IP port on the local machine be forwarded over  Specifies that a TCP/IP port on the local machine be forwarded over
 the secure channel to the specified host and port from the remote machine.  the secure channel to the specified host and port from the remote machine.
 The first argument must be a port number, and the second must be  The first argument must be a port number, and the second must be
 .Xo  .Ar host:port .
 .Sm off  IPv6 addresses can be specified with an alternative syntax:
 .Oo Ar bind_address : Oc  .Ar host/port .
 .Ar host : port  Multiple forwardings may be specified, and additional
 .Sm on  forwardings can be given on the command line.
 .Xc .  
 IPv6 addresses can be specified by enclosing addresses in square brackets or  
 by using an alternative syntax:  
 .Sm off  
 .Xo  
 .Op Ar bind_address No /  
 .Ar host No / Ar port  
 .Xc .  
 .Sm on  
 Multiple forwardings may be specified, and additional forwardings can be  
 given on the command line.  
 Only the superuser can forward privileged ports.  Only the superuser can forward privileged ports.
 By default, the local port is bound in accordance with the  
 .Cm GatewayPorts  
 setting.  
 However, an explicit  
 .Ar bind_address  
 may be used to bind the connection to a specific address.  
 The  
 .Ar bind_address  
 of  
 .Dq localhost  
 indicates that the listening port be bound for local use only, while an  
 empty address or  
 .Sq *  
 indicates that the port should be available from all interfaces.  
 .It Cm LogLevel  .It Cm LogLevel
 Gives the verbosity level that is used when logging messages from  Gives the verbosity level that is used when logging messages from
 .Nm ssh .  .Nm ssh .
Line 633 
Line 540 
 Specifies that a TCP/IP port on the remote machine be forwarded over  Specifies that a TCP/IP port on the remote machine be forwarded over
 the secure channel to the specified host and port from the local machine.  the secure channel to the specified host and port from the local machine.
 The first argument must be a port number, and the second must be  The first argument must be a port number, and the second must be
 .Xo  .Ar host:port .
 .Sm off  IPv6 addresses can be specified with an alternative syntax:
 .Oo Ar bind_address : Oc  .Ar host/port .
 .Ar host : port  
 .Sm on  
 .Xc .  
 IPv6 addresses can be specified by enclosing any addresses in square brackets  
 or by using the alternative syntax:  
 .Sm off  
 .Xo  
 .Op Ar bind_address No /  
 .Ar host No / Ar port  
 .Xc .  
 .Sm on  
 Multiple forwardings may be specified, and additional  Multiple forwardings may be specified, and additional
 forwardings can be given on the command line.  forwardings can be given on the command line.
 Only the superuser can forward privileged ports.  Only the superuser can forward privileged ports.
 .Pp  
 If the  
 .Ar bind_address  
 is not specified, the default is to only bind to loopback addresses.  
 If the  
 .Ar bind_address  
 is  
 .Ql *  
 or an empty string, then the forwarding is requested to listen on all  
 interfaces.  
 Specifying a remote  
 .Ar bind_address  
 will only succeed if the server's  
 .Cm GatewayPorts  
 option is enabled (see  
 .Xr sshd_config 5 ) .  
 .It Cm RhostsRSAAuthentication  .It Cm RhostsRSAAuthentication
 Specifies whether to try rhosts based authentication with RSA host  Specifies whether to try rhosts based authentication with RSA host
 authentication.  authentication.
Line 690 
Line 570 
 The default is  The default is
 .Dq yes .  .Dq yes .
 Note that this option applies to protocol version 1 only.  Note that this option applies to protocol version 1 only.
 .It Cm SendEnv  
 Specifies what variables from the local  
 .Xr environ 7  
 should be sent to the server.  
 Note that environment passing is only supported for protocol 2, the  
 server must also support it, and the server must be configured to  
 accept these environment variables.  
 Refer to  
 .Cm AcceptEnv  
 in  
 .Xr sshd_config 5  
 for how to configure the server.  
 Variables are specified by name, which may contain the wildcard characters  
 .Ql \&*  
 and  
 .Ql \&? .  
 Multiple environment variables may be separated by whitespace or spread  
 across multiple  
 .Cm SendEnv  
 directives.  
 The default is not to send any environment variables.  
 .It Cm ServerAliveInterval  .It Cm ServerAliveInterval
 Sets a timeout interval in seconds after which if no data has been received  Sets a timeout interval in seconds after which if no data has been received
 from the server,  from the server,
Legend:
Removed from v.1.29.2.2  
changed lines
  Added in v.1.30