- markus@cvs.openbsd.org 2003/05/11 20:30:25

[openssh.git] / ssh-keysign.8

diff --git a/ssh-keysign.8 b/ssh-keysign.8
index ab2cf21bab3fb37c087712ef5cb1e8bb6d241c7a..2e3f8ff3ef759ecae43dafdc9adbbe0c5875b759 100644 (file)
--- a/ssh-keysign.8
+++ b/ssh-keysign.8
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ssh-keysign.8,v 1.2 2002/06/10 16:56:30 stevesk Exp $
+.\" $OpenBSD: ssh-keysign.8,v 1.6 2003/03/28 10:11:43 jmc Exp $

 .\"
 .\" Copyright (c) 2002 Markus Friedl.  All rights reserved.
 .\"
 .\"
 .\" Copyright (c) 2002 Markus Friedl.  All rights reserved.
 .\"


@@ -36,6 +36,16 @@ is used by
 .Xr ssh 1
 to access the local host keys and generate the digital signature
 required during hostbased authentication with SSH protocol version 2.
 .Xr ssh 1
 to access the local host keys and generate the digital signature
 required during hostbased authentication with SSH protocol version 2.

+.Pp
+.Nm
+is disabled by default and can only be enabled in the
+global client configuration file
+.Pa /etc/ssh/ssh_config
+by setting
+.Cm EnableSSHKeysign
+to
+.Dq yes .
+.Pp

 .Nm
 is not intended to be invoked by the user, but from
 .Xr ssh 1 .
 .Nm
 is not intended to be invoked by the user, but from
 .Xr ssh 1 .


@@ -46,10 +56,14 @@ and
 for more information about hostbased authentication.
 .Sh FILES
 .Bl -tag -width Ds
 for more information about hostbased authentication.
 .Sh FILES
 .Bl -tag -width Ds

+.It Pa /etc/ssh/ssh_config
+Controls whether
+.Nm
+is enabled.

 .It Pa /etc/ssh/ssh_host_dsa_key, /etc/ssh/ssh_host_rsa_key
 These files contain the private parts of the host keys used to
 .It Pa /etc/ssh/ssh_host_dsa_key, /etc/ssh/ssh_host_rsa_key
 These files contain the private parts of the host keys used to

-generate the digital signature.  They
-should be owned by root, readable only by root, and not
+generate the digital signature.
+They should be owned by root, readable only by root, and not

 accessible to others.
 Since they are readable only by root,
 .Nm
 accessible to others.
 Since they are readable only by root,
 .Nm


@@ -58,6 +72,7 @@ must be set-uid root if hostbased authentication is used.
 .Sh SEE ALSO
 .Xr ssh 1 ,
 .Xr ssh-keygen 1 ,
 .Sh SEE ALSO
 .Xr ssh 1 ,
 .Xr ssh-keygen 1 ,

+.Xr ssh_config 5 ,

 .Xr sshd 8
 .Sh AUTHORS
 Markus Friedl <markus@openbsd.org>
 .Xr sshd 8
 .Sh AUTHORS
 Markus Friedl <markus@openbsd.org>