tyler.durden/openssh-portable
1
0
Fork 0
mirror of https://github.com/PowerShell/openssh-portable.git synced 2025-09-26 03:18:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

upstream: improve the text for -A a little; input from naddy and

Browse Source 
djm

OpenBSD-Commit-ID: f9cdfb1d6dbb9887c4bf3bb25f9c7a94294c988d
This commit is contained in:
jmc@openbsd.org 2019-11-28 12:24:31 +00:00 committed by Damien Miller
parent 9a0e01bd0c
commit d39a865b7a
1 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ssh.1
View File

@ -33,8 +33,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: ssh.1,v 1.406 2019/11/18 23:16:49 naddy Exp $ .\" $OpenBSD: ssh.1,v 1.407 2019/11/28 12:24:31 jmc Exp $
.Dd $Mdocdate: November 18 2019 $ .Dd $Mdocdate: November 28 2019 $
.Dt SSH 1 .Dt SSH 1
.Os .Os
.Sh NAME .Sh NAME
@ -110,7 +110,8 @@ Forces
to use IPv6 addresses only. to use IPv6 addresses only.
.Pp .Pp
.It Fl A .It Fl A
Enables forwarding of the authentication agent connection. Enables forwarding of connections from an authentication agent such as
.Xr ssh-agent 1 .
This can also be specified on a per-host basis in a configuration file. This can also be specified on a per-host basis in a configuration file.
.Pp .Pp
Agent forwarding should be enabled with caution. Agent forwarding should be enabled with caution.
@ -121,6 +122,9 @@ socket) can access the local agent through the forwarded connection.
An attacker cannot obtain key material from the agent, An attacker cannot obtain key material from the agent,
however they can perform operations on the keys that enable them to however they can perform operations on the keys that enable them to
authenticate using the identities loaded into the agent. authenticate using the identities loaded into the agent.
A safer alternative may be to use a jump host
(see
.Fl J ) .
.Pp .Pp
.It Fl a .It Fl a
Disables forwarding of the authentication agent connection. Disables forwarding of the authentication agent connection.