src/usr.bin/ssh/sshd_config.5 - diff

Return to sshd_config.5 CVS log

Up to [local] / src / usr.bin / ssh

version 1.145, 2012/10/04 13:21:50

version 1.146, 2012/10/30 21:29:55

Line 151

.Xr ssh_config 5

for more information on patterns.

.It Cm AuthorizedKeysCommand

Specifies a program to be used for lookup of the user's public keys.

The program will be invoked with a single argument of the username

being authenticated, and should produce on standard output zero or

more lines of authorized_keys output (see AUTHORIZED_KEYS in

.Xr sshd 8 )

If a key supplied by AuthorizedKeysCommand does not successfully authenticate

and authorize the user then public key authentication continues using the usual

.Cm AuthorizedKeysFile

files.

By default, no AuthorizedKeysCommand is run.

.It Cm AuthorizedKeysCommandUser

Specifies the user under whose account the AuthorizedKeysCommand is run.

The default is the user being authenticated.

It is recommended to use a dedicated user that has no other role on the host

than running authorized keys commands.

.It Cm AuthorizedKeysFile

Specifies the file that contains the public keys that can be used

for user authentication.

Line 713

Line 729

.Cm AllowTcpForwarding ,

.Cm AllowUsers ,

.Cm AuthorizedKeysFile ,

.Cm AuthorizedKeysCommand ,

.Cm AuthorizedKeysCommandUser ,

.Cm AuthorizedPrincipalsFile ,

.Cm Banner ,

.Cm ChrootDirectory ,