[BACK]Return to sshd.8 CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/sshd.8 between version 1.51.2.2 and 1.51.2.3

version 1.51.2.2, 2000/09/01 18:23:24 version 1.51.2.3, 2000/11/08 21:31:31
Line 1 
Line 1 
 .\"  -*- nroff -*-  .\"  -*- nroff -*-
 .\"  .\"
 .\" sshd.8.in  
 .\"  
 .\" Author: Tatu Ylonen <ylo@cs.hut.fi>  .\" Author: Tatu Ylonen <ylo@cs.hut.fi>
 .\"  
 .\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland  .\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
 .\"                    All rights reserved  .\"                    All rights reserved
 .\"  .\"
 .\" Created: Sat Apr 22 21:55:14 1995 ylo  .\" As far as I am concerned, the code I have written for this software
   .\" can be used freely for any purpose.  Any derived versions of this
   .\" software must be clearly marked as such, and if the derived work is
   .\" incompatible with the protocol description in the RFC file, it must be
   .\" called by a name other than "ssh" or "Secure Shell".
 .\"  .\"
 .\" $Id$  .\" Copyright (c) 1999,2000 Markus Friedl. All rights reserved.
   .\" Copyright (c) 1999 Aaron Campbell. All rights reserved.
   .\" Copyright (c) 1999 Theo de Raadt. All rights reserved.
 .\"  .\"
   .\" Redistribution and use in source and binary forms, with or without
   .\" modification, are permitted provided that the following conditions
   .\" are met:
   .\" 1. Redistributions of source code must retain the above copyright
   .\"    notice, this list of conditions and the following disclaimer.
   .\" 2. Redistributions in binary form must reproduce the above copyright
   .\"    notice, this list of conditions and the following disclaimer in the
   .\"    documentation and/or other materials provided with the distribution.
   .\"
   .\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
   .\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
   .\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
   .\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
   .\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
   .\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
   .\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
   .\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
   .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
   .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
   .\"
   .\" $OpenBSD$
 .Dd September 25, 1999  .Dd September 25, 1999
 .Dt SSHD 8  .Dt SSHD 8
 .Os  .Os
Line 163 
Line 187 
 log, and does not put itself in the background.  log, and does not put itself in the background.
 The server also will not fork and will only process one connection.  The server also will not fork and will only process one connection.
 This option is only intended for debugging for the server.  This option is only intended for debugging for the server.
   Multiple -d options increases the debugging level.
   Maximum is 3.
 .It Fl f Ar configuration_file  .It Fl f Ar configuration_file
 Specifies the name of the configuration file.  Specifies the name of the configuration file.
 The default is  The default is
Line 231 
Line 257 
 .It Fl Q  .It Fl Q
 Do not print an error message if RSA support is missing.  Do not print an error message if RSA support is missing.
 .It Fl V Ar client_protocol_id  .It Fl V Ar client_protocol_id
 SSH2 compatibility mode.  SSH-2 compatibility mode.
 When this option is specified  When this option is specified
 .Nm  .Nm
 assumes the client has sent the supplied version string  assumes the client has sent the supplied version string
 and skips the  and skips the
 Protocol Version Identification Exchange.  Protocol Version Identification Exchange.
   This option is not intended to be called directly.
 .It Fl 4  .It Fl 4
 Forces  Forces
 .Nm  .Nm
Line 277 
Line 304 
 Only group names are valid; a numerical group ID isn't recognized.  Only group names are valid; a numerical group ID isn't recognized.
 By default login is allowed regardless of the primary group.  By default login is allowed regardless of the primary group.
 .Pp  .Pp
   .It Cm AllowTcpForwarding
   Specifies whether TCP forwarding is permitted.
   The default is
   .Dq yes .
   Note that disabling TCP forwarding does not improve security unless
   users are also denied shell access, as they can always install their
   own forwarders.
   .Pp
 .It Cm AllowUsers  .It Cm AllowUsers
 This keyword can be followed by a number of user names, separated  This keyword can be followed by a number of user names, separated
 by spaces.  by spaces.
Line 400 
Line 435 
 This can be in the form of a Kerberos ticket, or if  This can be in the form of a Kerberos ticket, or if
 .Cm PasswordAuthentication  .Cm PasswordAuthentication
 is yes, the password provided by the user will be validated through  is yes, the password provided by the user will be validated through
 the Kerberos KDC.  To use this option, the server needs a  the Kerberos KDC.
   To use this option, the server needs a
 Kerberos servtab which allows the verification of the KDC's identity.  Kerberos servtab which allows the verification of the KDC's identity.
 Default is  Default is
 .Dq yes .  .Dq yes .
Line 408 
Line 444 
 If set then if password authentication through Kerberos fails then  If set then if password authentication through Kerberos fails then
 the password will be validated via any additional local mechanism  the password will be validated via any additional local mechanism
 such as  such as
 .Pa /etc/passwd  .Pa /etc/passwd .
 or SecurID.  
 Default is  Default is
 .Dq yes .  .Dq yes .
 .It Cm KerberosTgtPassing  .It Cm KerberosTgtPassing
Line 465 
Line 500 
 Alternatively, random early drop can be enabled by specifying  Alternatively, random early drop can be enabled by specifying
 the three colon separated values  the three colon separated values
 .Dq start:rate:full  .Dq start:rate:full
 (e.g. "10:30:60").  (e.g., "10:30:60").
 .Nm  .Nm
 will refuse connection attempts with a probabillity of  will refuse connection attempts with a probabillity of
 .Dq rate/100  .Dq rate/100
Line 587 
Line 622 
 The default is  The default is
 .Dq yes .  .Dq yes .
 .It Cm Subsystem  .It Cm Subsystem
 Configures an external subsystem (e.g. file transfer daemon).  Configures an external subsystem (e.g., file transfer daemon).
 Arguments should be a subsystem name and a command to execute upon subsystem request.  Arguments should be a subsystem name and a command to execute upon subsystem
   request.
   The command
   .Xr sftp-server 8
   implements the
   .Dq sftp
   file transfer subsystem.
 By default no subsystems are defined.  By default no subsystems are defined.
 Note that this option applies to protocol version 2 only.  Note that this option applies to protocol version 2 only.
 .It Cm SyslogFacility  .It Cm SyslogFacility
Line 1032 
Line 1073 
 The support for SSH protocol 2 was written by Markus Friedl.  The support for SSH protocol 2 was written by Markus Friedl.
 .Sh SEE ALSO  .Sh SEE ALSO
 .Xr scp 1 ,  .Xr scp 1 ,
   .Xr sftp-server 8 ,
 .Xr ssh 1 ,  .Xr ssh 1 ,
 .Xr ssh-add 1 ,  .Xr ssh-add 1 ,
 .Xr ssh-agent 1 ,  .Xr ssh-agent 1 ,
Legend:
Removed from v.1.51.2.2  
changed lines
  Added in v.1.51.2.3