version 1.87, 2006/02/26 18:03:10 |
version 1.87.2.1, 2006/09/30 04:06:51 |
|
|
.Nm sftp |
.Nm sftp |
.Fl o |
.Fl o |
option. |
option. |
|
Arguments may optionally be enclosed in double quotes |
|
.Pq \&" |
|
in order to represent arguments containing spaces. |
.Pp |
.Pp |
The possible |
The possible |
keywords and their meanings are as follows (note that |
keywords and their meanings are as follows (note that |
|
|
to disable the escape |
to disable the escape |
character entirely (making the connection transparent for binary |
character entirely (making the connection transparent for binary |
data). |
data). |
|
.It Cm ExitOnForwardFailure |
|
Specifies whether |
|
.Xr ssh 1 |
|
should terminate the connection if it cannot set up all requested |
|
dynamic, local, and remote port forwardings. |
|
The argument must be |
|
.Dq yes |
|
or |
|
.Dq no . |
|
The default is |
|
.Dq no . |
.It Cm ForwardAgent |
.It Cm ForwardAgent |
Specifies whether the connection to the authentication agent (if any) |
Specifies whether the connection to the authentication agent (if any) |
will be forwarded to the remote machine. |
will be forwarded to the remote machine. |
|
|
be disclosed. |
be disclosed. |
The default is |
The default is |
.Dq no . |
.Dq no . |
Note that hashing of names and addresses will not be retrospectively applied |
Note that existing names and addresses in known hosts files |
to existing known hosts files, but these may be manually hashed using |
will not be converted automatically, |
|
but may be manually hashed using |
.Xr ssh-keygen 1 . |
.Xr ssh-keygen 1 . |
.It Cm HostbasedAuthentication |
.It Cm HostbasedAuthentication |
Specifies whether to try rhosts based authentication with public key |
Specifies whether to try rhosts based authentication with public key |
|
|
for protocol version 2. |
for protocol version 2. |
Additionally, any identities represented by the authentication agent |
Additionally, any identities represented by the authentication agent |
will be used for authentication. |
will be used for authentication. |
|
.Pp |
The file name may use the tilde |
The file name may use the tilde |
syntax to refer to a user's home directory. |
syntax to refer to a user's home directory or one of the following |
|
escape characters: |
|
.Ql %d |
|
(local user's home directory), |
|
.Ql %u |
|
(local user name), |
|
.Ql %l |
|
(local host name), |
|
.Ql %h |
|
(remote host name) or |
|
.Ql %r |
|
(remote user name). |
|
.Pp |
It is possible to have |
It is possible to have |
multiple identity files specified in configuration files; all these |
multiple identity files specified in configuration files; all these |
identities will be tried in sequence. |
identities will be tried in sequence. |
|
|
over another method (e.g.\& |
over another method (e.g.\& |
.Cm password ) |
.Cm password ) |
The default for this option is: |
The default for this option is: |
.Dq hostbased,publickey,keyboard-interactive,password . |
.Do gssapi-with-mic , |
|
hostbased, |
|
publickey, |
|
keyboard-interactive, |
|
password |
|
.Dc . |
.It Cm Protocol |
.It Cm Protocol |
Specifies the protocol versions |
Specifies the protocol versions |
.Xr ssh 1 |
.Xr ssh 1 |
|
|
.Cm ServerAliveCountMax |
.Cm ServerAliveCountMax |
is left at the default, if the server becomes unresponsive, |
is left at the default, if the server becomes unresponsive, |
ssh will disconnect after approximately 45 seconds. |
ssh will disconnect after approximately 45 seconds. |
|
This option applies to protocol version 2 only. |
.It Cm ServerAliveInterval |
.It Cm ServerAliveInterval |
Sets a timeout interval in seconds after which if no data has been received |
Sets a timeout interval in seconds after which if no data has been received |
from the server, |
from the server, |
|
|
To disable TCP keepalive messages, the value should be set to |
To disable TCP keepalive messages, the value should be set to |
.Dq no . |
.Dq no . |
.It Cm Tunnel |
.It Cm Tunnel |
Request starting |
Request |
.Xr tun 4 |
.Xr tun 4 |
device forwarding between the client and the server. |
device forwarding between the client and the server. |
This option also allows requesting layer 2 (ethernet) |
|
instead of layer 3 (point-to-point) tunneling from the server. |
|
The argument must be |
The argument must be |
.Dq yes , |
.Dq yes , |
.Dq point-to-point , |
.Dq point-to-point |
.Dq ethernet , |
(layer 3), |
|
.Dq ethernet |
|
(layer 2), |
or |
or |
.Dq no . |
.Dq no . |
|
Specifying |
|
.Dq yes |
|
requests the default tunnel mode, which is |
|
.Dq point-to-point . |
The default is |
The default is |
.Dq no . |
.Dq no . |
.It Cm TunnelDevice |
.It Cm TunnelDevice |
Force a specified |
Specifies the |
.Xr tun 4 |
.Xr tun 4 |
device on the client. |
devices to open on the client |
Without this option, the next available device will be used. |
.Pq Ar local_tun |
|
and the server |
|
.Pq Ar remote_tun . |
|
.Pp |
|
The argument must be |
|
.Sm off |
|
.Ar local_tun Op : Ar remote_tun . |
|
.Sm on |
|
The devices may be specified by numerical ID or the keyword |
|
.Dq any , |
|
which uses the next available tunnel device. |
|
If |
|
.Ar remote_tun |
|
is not specified, it defaults to |
|
.Dq any . |
|
The default is |
|
.Dq any:any . |
.It Cm UsePrivilegedPort |
.It Cm UsePrivilegedPort |
Specifies whether to use a privileged port for outgoing connections. |
Specifies whether to use a privileged port for outgoing connections. |
The argument must be |
The argument must be |