Updated sshd_config (markdown)

Manoj Ampalam 2018-05-29 14:51:46 -07:00
parent 66aa84f3ab
commit af85a70414

@ -4,9 +4,6 @@ _______
This keyword can be followed by a list of group name patterns, separated by spaces. If specified, login is allowed only for users whose primary group or supplementary group list matches one of the patterns. Only group names are valid; a numerical group ID is not recognized. By default, login is allowed for all groups. The allow/deny directives are processed in the following order: **DenyUsers**, **AllowUsers**, **DenyGroups**, and finally **AllowGroups**. See PATTERNS in [ssh_config](http://man.openbsd.org/ssh_config.5) for more information on patterns. This keyword can be followed by a list of group name patterns, separated by spaces. If specified, login is allowed only for users whose primary group or supplementary group list matches one of the patterns. Only group names are valid; a numerical group ID is not recognized. By default, login is allowed for all groups. The allow/deny directives are processed in the following order: **DenyUsers**, **AllowUsers**, **DenyGroups**, and finally **AllowGroups**. See PATTERNS in [ssh_config](http://man.openbsd.org/ssh_config.5) for more information on patterns.
windows specific info to follow... windows specific info to follow...
_______
#### AllowStreamLocalForwarding
Not supported
______ ______
#### AllowUsers #### AllowUsers
This keyword can be followed by a list of user name patterns, separated by spaces. If specified, login is allowed only for user names that match one of the patterns. Only user names are valid; a numerical user ID is not recognized. By default, login is allowed for all users. If the pattern takes the form USER@HOST then USER and HOST are separately checked, restricting logins to particular users from particular hosts. HOST criteria may additionally contain addresses to match in CIDR address/masklen format. The allow/deny directives are processed in the following order: **DenyUsers**, **AllowUsers**, **DenyGroups**, and finally **AllowGroups**. See PATTERNS in [ssh_config](http://man.openbsd.org/ssh_config.5) for more information on patterns. This keyword can be followed by a list of user name patterns, separated by spaces. If specified, login is allowed only for user names that match one of the patterns. Only user names are valid; a numerical user ID is not recognized. By default, login is allowed for all users. If the pattern takes the form USER@HOST then USER and HOST are separately checked, restricting logins to particular users from particular hosts. HOST criteria may additionally contain addresses to match in CIDR address/masklen format. The allow/deny directives are processed in the following order: **DenyUsers**, **AllowUsers**, **DenyGroups**, and finally **AllowGroups**. See PATTERNS in [ssh_config](http://man.openbsd.org/ssh_config.5) for more information on patterns.
@ -17,13 +14,17 @@ ______
Available authentication methods are "password" and "publickey". Available authentication methods are "password" and "publickey".
______ ______
#### Not supported #### Not supported
AuthorizedKeysCommand AllowStreamLocalForwarding
AuthorizedKeysCommandUser
AuthorizedPrincipalsCommand
AuthorizedPrincipalsCommandUser
ChrootDirectory
Compression AuthorizedKeysCommand
AuthorizedKeysCommandUser
AuthorizedPrincipalsCommand
AuthorizedPrincipalsCommandUser
ChrootDirectory
Compression Compression
@ -40,15 +41,23 @@ GSSAPICleanupCredentials
GSSAPIStrictAcceptorCheck GSSAPIStrictAcceptorCheck
HostbasedAcceptedKeyTypes HostbasedAcceptedKeyTypes
HostbasedAuthentication HostbasedAuthentication
HostbasedUsesNameFromPacketOnly HostbasedUsesNameFromPacketOnly
IgnoreRhosts IgnoreRhosts
IgnoreUserKnownHosts IgnoreUserKnownHosts
KbdInteractiveAuthentication KbdInteractiveAuthentication
KerberosAuthentication KerberosAuthentication
KerberosGetAFSToken KerberosGetAFSToken
KerberosOrLocalPasswd KerberosOrLocalPasswd
KerberosTicketCleanup KerberosTicketCleanup
PermitRootLogin PermitRootLogin
@ -72,8 +81,11 @@ StreamLocalBindUnlink
StrictModes StrictModes
X11DisplayOffset X11DisplayOffset
X11Forwarding X11Forwarding
X11UseLocalhost X11UseLocalhost
XAuthLocation XAuthLocation