- jmc@cvs.openbsd.org 2006/02/24 10:33:54

[sshd_config.5]
     signpost to PATTERNS;
This commit is contained in:
Damien Miller 2006-03-15 11:54:21 +11:00
parent 6def55171f
commit 0c2079d81f
2 changed files with 29 additions and 21 deletions

View File

@ -154,6 +154,9 @@
[ssh_config.5] [ssh_config.5]
add section on patterns; add section on patterns;
from dtucker + myself from dtucker + myself
- jmc@cvs.openbsd.org 2006/02/24 10:33:54
[sshd_config.5]
signpost to PATTERNS;
20060313 20060313
- (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong) - (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong)
@ -4055,4 +4058,4 @@
- (djm) Trim deprecated options from INSTALL. Mention UsePAM - (djm) Trim deprecated options from INSTALL. Mention UsePAM
- (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu - (djm) Fix quote handling in sftp; Patch from admorten AT umich.edu
$Id: ChangeLog,v 1.4182 2006/03/15 00:54:05 djm Exp $ $Id: ChangeLog,v 1.4183 2006/03/15 00:54:21 djm Exp $

View File

@ -34,7 +34,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd_config.5,v 1.48 2006/01/02 17:09:49 jmc Exp $ .\" $OpenBSD: sshd_config.5,v 1.49 2006/02/24 10:33:54 jmc Exp $
.Dd September 25, 1999 .Dd September 25, 1999
.Dt SSHD_CONFIG 5 .Dt SSHD_CONFIG 5
.Os .Os
@ -99,13 +99,14 @@ This keyword can be followed by a list of group name patterns, separated
by spaces. by spaces.
If specified, login is allowed only for users whose primary If specified, login is allowed only for users whose primary
group or supplementary group list matches one of the patterns. group or supplementary group list matches one of the patterns.
.Ql \&*
and
.Ql \&?
can be used as
wildcards in the patterns.
Only group names are valid; a numerical group ID is not recognized. Only group names are valid; a numerical group ID is not recognized.
By default, login is allowed for all groups. By default, login is allowed for all groups.
.Pp
See
.Sx PATTERNS
in
.Xr ssh_config 5
for more information on patterns.
.It Cm AllowTcpForwarding .It Cm AllowTcpForwarding
Specifies whether TCP forwarding is permitted. Specifies whether TCP forwarding is permitted.
The default is The default is
@ -118,16 +119,17 @@ This keyword can be followed by a list of user name patterns, separated
by spaces. by spaces.
If specified, login is allowed only for user names that If specified, login is allowed only for user names that
match one of the patterns. match one of the patterns.
.Ql \&*
and
.Ql \&?
can be used as
wildcards in the patterns.
Only user names are valid; a numerical user ID is not recognized. Only user names are valid; a numerical user ID is not recognized.
By default, login is allowed for all users. By default, login is allowed for all users.
If the pattern takes the form USER@HOST then USER and HOST If the pattern takes the form USER@HOST then USER and HOST
are separately checked, restricting logins to particular are separately checked, restricting logins to particular
users from particular hosts. users from particular hosts.
.Pp
See
.Sx PATTERNS
in
.Xr ssh_config 5
for more information on patterns.
.It Cm AuthorizedKeysFile .It Cm AuthorizedKeysFile
Specifies the file that contains the public keys that can be used Specifies the file that contains the public keys that can be used
for user authentication. for user authentication.
@ -231,26 +233,29 @@ This keyword can be followed by a list of group name patterns, separated
by spaces. by spaces.
Login is disallowed for users whose primary group or supplementary Login is disallowed for users whose primary group or supplementary
group list matches one of the patterns. group list matches one of the patterns.
.Ql \&*
and
.Ql \&?
can be used as
wildcards in the patterns.
Only group names are valid; a numerical group ID is not recognized. Only group names are valid; a numerical group ID is not recognized.
By default, login is allowed for all groups. By default, login is allowed for all groups.
.Pp
See
.Sx PATTERNS
in
.Xr ssh_config 5
for more information on patterns.
.It Cm DenyUsers .It Cm DenyUsers
This keyword can be followed by a list of user name patterns, separated This keyword can be followed by a list of user name patterns, separated
by spaces. by spaces.
Login is disallowed for user names that match one of the patterns. Login is disallowed for user names that match one of the patterns.
.Ql \&*
and
.Ql \&?
can be used as wildcards in the patterns.
Only user names are valid; a numerical user ID is not recognized. Only user names are valid; a numerical user ID is not recognized.
By default, login is allowed for all users. By default, login is allowed for all users.
If the pattern takes the form USER@HOST then USER and HOST If the pattern takes the form USER@HOST then USER and HOST
are separately checked, restricting logins to particular are separately checked, restricting logins to particular
users from particular hosts. users from particular hosts.
.Pp
See
.Sx PATTERNS
in
.Xr ssh_config 5
for more information on patterns.
.It Cm GatewayPorts .It Cm GatewayPorts
Specifies whether remote hosts are allowed to connect to ports Specifies whether remote hosts are allowed to connect to ports
forwarded for the client. forwarded for the client.