add documentation for options in authorized_keys file
This commit is contained in:
parent
b10a0824c1
commit
c0cfdd5901
|
@ -44,4 +44,10 @@ and `ls -lsha ~ssh-port-forwarding/.ssh/` should look like this:
|
|||
This is all done in `/home/ssh-port-forwarding/.ssh/authorized_keys`.
|
||||
|
||||
First use the `ssh-keygen` command to create a private and public key pair on the client side. Don't type any password! Then use `cat ~/.ssh/id_rsa.pub` to display the content of your newly created public key. After that add a new line in the `authorized_keys` file on the server. Use the following line as an example. Your key starts at `AAAA...` and this all needs to be in a single line per key.
|
||||
`restrict,command="",port-forwarding,permitlisten="localhost:22",permitopen="localhost:22" ssh-rsa AAAA...`
|
||||
`restrict,command="",port-forwarding,permitlisten="localhost:22",permitopen="localhost:22" ssh-rsa AAAA...`
|
||||
|
||||
`restrict`: this restricts all current and future forwarding options
|
||||
`command=""`: don't allow client to send a command, set an empty forced command instead
|
||||
`port-forwarding`: allow port forwarding
|
||||
`permitlisten="localhost:22"`: restrict client to access ssh port on server only (default for security reasons)
|
||||
`permitopen="localhost:22"`: restrict client to create port 22 on the server only, which will fail (default for security reasons)
|
Loading…
Reference in New Issue