From 1e0fcfc6b3f7b2662baf47242ca1c45f82ffac94 Mon Sep 17 00:00:00 2001
From: djm <djm>
Date: Wed, 15 Mar 2006 00:32:06 +0000
Subject: [PATCH]    - jmc@cvs.openbsd.org 2006/02/13 10:16:39      [sshd.8]   
   no need to subsection the authorized_keys examples - instead, convert     
 this to look like an actual file. also use proto 2 keys, and use IETF     
 example addresses;

---
 ChangeLog |  5 +++++
 sshd.8    | 20 ++++++++++----------
 2 files changed, 15 insertions(+), 10 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index 9be3df73..fc51a864 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -89,6 +89,11 @@
      [sshd.8]
      sort the list of options permissable w/ authorized_keys;
      ok djm dtucker
+   - jmc@cvs.openbsd.org 2006/02/13 10:16:39
+     [sshd.8]
+     no need to subsection the authorized_keys examples - instead, convert
+     this to look like an actual file. also use proto 2 keys, and use IETF
+     example addresses;
 
 20060313
  - (dtucker) [configure.ac] Bug #1171: Don't use printf("%lld", longlong)
diff --git a/sshd.8 b/sshd.8
index 58bf9062..4eb5321a 100644
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: sshd.8,v 1.218 2006/02/12 17:57:19 jmc Exp $
+.\" $OpenBSD: sshd.8,v 1.219 2006/02/13 10:16:39 jmc Exp $
 .Dd September 25, 1999
 .Dt SSHD 8
 .Os
@@ -503,16 +503,16 @@ device on the server.
 Without this option, the next available device will be used if
 the client requests a tunnel.
 .El
-.Ss Examples
-1024 33 12121...312314325 ylo@foo.bar
-.Pp
-from="*.niksula.hut.fi,!pc.niksula.hut.fi" 1024 35 23...2334 ylo@niksula
-.Pp
-command="dump /home",no-pty,no-port-forwarding 1024 33 23...2323 backup.hut.fi
 .Pp
-permitopen="10.2.1.55:80",permitopen="10.2.1.56:25" 1024 33 23...2323
-.Pp
-tunnel="0",command="sh /etc/netstart tun0" ssh-rsa AAAA...== reyk@openbsd.org
+An example authorized_keys file:
+.Bd -literal
+# Comments allowed at start of line
+ssh-rsa AAAAB3Nza...LiPk== user@example.net
+from="*.sales.example.net,!pc.sales.example.net" ssh-rsa AAAAB2...19Q== john@example.net
+command="dump /home",no-pty,no-port-forwarding ssh-dss AAAAC3...51R== example.net
+permitopen="192.0.2.1:80",permitopen="192.0.2.2:25" ssh-dss AAAAB5...21S==
+tunnel="0",command="sh /etc/netstart tun0" ssh-rsa AAAA...== jane@example.net
+.Ed
 .Sh SSH_KNOWN_HOSTS FILE FORMAT
 The
 .Pa /etc/ssh/ssh_known_hosts
-- 
2.45.2