summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sshd_config
diff options
context:
space:
mode:
authorDamien Miller <djm@cvs.openbsd.org>2012-10-30 21:29:56 +0000
committerDamien Miller <djm@cvs.openbsd.org>2012-10-30 21:29:56 +0000
commitc8de34a24dae52e49b435ff165f2c87c79c36886 (patch)
tree0be452894649b8028e6dbec23923cec037c0794e /usr.bin/ssh/sshd_config
parent2ca5bf7e8ac4efaa27b8c4c787bf3218d2be26fc (diff)
new sshd_config option AuthorizedKeysCommand to support fetching
authorized_keys from a command in addition to (or instead of) from the filesystem. The command is run as the target server user unless another specified via a new AuthorizedKeysCommandUser option. patch originally by jchadima AT redhat.com, reworked by me; feedback and ok markus@
Diffstat (limited to 'usr.bin/ssh/sshd_config')
-rw-r--r--usr.bin/ssh/sshd_config5
1 files changed, 4 insertions, 1 deletions
diff --git a/usr.bin/ssh/sshd_config b/usr.bin/ssh/sshd_config
index 1c600a89112..80e1f6fb7b1 100644
--- a/usr.bin/ssh/sshd_config
+++ b/usr.bin/ssh/sshd_config
@@ -1,4 +1,4 @@
-# $OpenBSD: sshd_config,v 1.87 2012/07/10 02:19:15 djm Exp $
+# $OpenBSD: sshd_config,v 1.88 2012/10/30 21:29:55 djm Exp $
# This is the sshd server system-wide configuration file. See
# sshd_config(5) for more information.
@@ -49,6 +49,9 @@ AuthorizedKeysFile .ssh/authorized_keys
#AuthorizedPrincipalsFile none
+#AuthorizedKeysCommand none
+#AuthorizedKeysCommandUser nobody
+
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
#RhostsRSAAuthentication no
# similar for protocol version 2