- djm@cvs.openbsd.org 2012/04/12 02:43:55

[sshd_config sshd_config.5]
     mention AuthorizedPrincipalsFile=none default
This commit is contained in:
Damien Miller 2012-04-22 11:25:10 +10:00
parent 23528816dc
commit 8fef9ebbab
3 changed files with 10 additions and 3 deletions

View File

@ -37,6 +37,9 @@
[servconf.c servconf.h sshd.c sshd_config sshd_config.5] [servconf.c servconf.h sshd.c sshd_config sshd_config.5]
VersionAddendum option to allow server operators to append some arbitrary VersionAddendum option to allow server operators to append some arbitrary
text to the SSH-... banner; ok deraadt@ "don't care" markus@ text to the SSH-... banner; ok deraadt@ "don't care" markus@
- djm@cvs.openbsd.org 2012/04/12 02:43:55
[sshd_config sshd_config.5]
mention AuthorizedPrincipalsFile=none default
20120420 20120420
- (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec] - (djm) [contrib/caldera/openssh.spec contrib/redhat/openssh.spec]

View File

@ -1,4 +1,4 @@
# $OpenBSD: sshd_config,v 1.85 2012/04/12 02:42:32 djm Exp $ # $OpenBSD: sshd_config,v 1.86 2012/04/12 02:43:55 djm Exp $
# This is the sshd server system-wide configuration file. See # This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information. # sshd_config(5) for more information.
@ -49,6 +49,8 @@
# but this is overridden so installations will only check .ssh/authorized_keys # but this is overridden so installations will only check .ssh/authorized_keys
AuthorizedKeysFile .ssh/authorized_keys AuthorizedKeysFile .ssh/authorized_keys
#AuthorizedPrincipalsFile none
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#RhostsRSAAuthentication no #RhostsRSAAuthentication no
# similar for protocol version 2 # similar for protocol version 2

View File

@ -33,7 +33,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd_config.5,v 1.137 2012/04/12 02:42:32 djm Exp $ .\" $OpenBSD: sshd_config.5,v 1.138 2012/04/12 02:43:55 djm Exp $
.Dd $Mdocdate: April 12 2012 $ .Dd $Mdocdate: April 12 2012 $
.Dt SSHD_CONFIG 5 .Dt SSHD_CONFIG 5
.Os .Os
@ -198,7 +198,9 @@ After expansion,
is taken to be an absolute path or one relative to the user's home is taken to be an absolute path or one relative to the user's home
directory. directory.
.Pp .Pp
The default is not to use a principals file \(en in this case, the username The default is
.Dq none ,
i.e. not to use a principals file \(en in this case, the username
of the user must appear in a certificate's principals list for it to be of the user must appear in a certificate's principals list for it to be
accepted. accepted.
Note that Note that