Lines Matching +full:host +full:- +full:only

1 .\"	$OpenBSD: ssh-add.1,v 1.87 2024/06/17 08:30:29 djm Exp $
42 .Nm ssh-add
45 .Nm ssh-add
53 .Nm ssh-add
57 .Nm ssh-add
59 .Nm ssh-add
65 .Xr ssh-agent 1 .
77 .Pa -cert.pub
95 .Bl -tag -width Ds
98 certificates only and skip plain keys.
103 .Xr ssh-askpass 1 .
105 .Xr ssh-askpass 1 ,
123 .Dq -
140 destination-constrained keys via the
156 When adding keys, constrain them to be usable only through specific hosts or to
160 .Sq [user@]dest-hostname
161 permit use of the key only from the origin host (the one running
162 .Xr ssh-agent 1 )
163 to the listed destination host, with optional user name.
166 .Sq src-hostname>[user@]dst-hostname
168 .Xr ssh-agent 1
169 to be used through a particular host (as specified by
170 .Sq src-hostname )
171 to authenticate to a further host,
173 .Sq dst-hostname .
178 .Xr ssh-agent 1
181 For example, if key is forwarded to a remote host,
182 .Sq host-b ,
183 and is attempting authentication to another host,
184 .Sq host-c ,
185 then the operation will be successful only if
186 .Sq host-b
187 was permitted from the origin host and the subsequent
188 .Sq host-b>host-c
191 Hosts are identified by their host keys, and are looked up from known hosts
194 Wildcards patterns may be used for hostnames and certificate host
202 destination-constrained keys over a forwarded
203 .Xr ssh-agent 1
206 It is also important to note that destination constraints can only be
208 .Xr ssh-agent 1
214 from forwarding it again and using it on a different host (but only to
220 keys only and skip certificates.
230 FIDO authenticator-hosted keys, overriding the default of using the
235 Certificate files may optionally be listed as command-line arguments.
263 .Bl -tag -width Ds
278 .Dq ssh-askpass )
307 .Ux Ns -domain
311 FIDO authenticator-hosted keys, overriding the default of using
312 the built-in USB HID support.
315 .Bl -tag -width Ds -compact
321 Contains the ECDSA, authenticator-hosted ECDSA, Ed25519,
322 authenticator-hosted Ed25519 or RSA authentication identity of the user.
336 .Xr ssh-agent 1 ,
337 .Xr ssh-askpass 1 ,
338 .Xr ssh-keygen 1 ,
345 removed many bugs, re-added newer features and