1.\" 2.\" Author: Tatu Ylonen <ylo@cs.hut.fi> 3.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4.\" All rights reserved 5.\" 6.\" As far as I am concerned, the code I have written for this software 7.\" can be used freely for any purpose. Any derived versions of this 8.\" software must be clearly marked as such, and if the derived work is 9.\" incompatible with the protocol description in the RFC file, it must be 10.\" called by a name other than "ssh" or "Secure Shell". 11.\" 12.\" Copyright (c) 1999,2000 Markus Friedl. All rights reserved. 13.\" Copyright (c) 1999 Aaron Campbell. All rights reserved. 14.\" Copyright (c) 1999 Theo de Raadt. All rights reserved. 15.\" 16.\" Redistribution and use in source and binary forms, with or without 17.\" modification, are permitted provided that the following conditions 18.\" are met: 19.\" 1. Redistributions of source code must retain the above copyright 20.\" notice, this list of conditions and the following disclaimer. 21.\" 2. Redistributions in binary form must reproduce the above copyright 22.\" notice, this list of conditions and the following disclaimer in the 23.\" documentation and/or other materials provided with the distribution. 24.\" 25.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 26.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 27.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 28.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 29.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 30.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 31.\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 32.\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 33.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" 36.\" $OpenBSD: ssh_config.5,v 1.236 2016/07/22 07:00:46 djm Exp $ 37.\" $FreeBSD$ 38.Dd $Mdocdate: July 22 2016 $ 39.Dt SSH_CONFIG 5 40.Os 41.Sh NAME 42.Nm ssh_config 43.Nd OpenSSH SSH client configuration files 44.Sh SYNOPSIS 45.Nm ~/.ssh/config 46.Nm /etc/ssh/ssh_config 47.Sh DESCRIPTION 48.Xr ssh 1 49obtains configuration data from the following sources in 50the following order: 51.Pp 52.Bl -enum -offset indent -compact 53.It 54command-line options 55.It 56user's configuration file 57.Pq Pa ~/.ssh/config 58.It 59system-wide configuration file 60.Pq Pa /etc/ssh/ssh_config 61.El 62.Pp 63For each parameter, the first obtained value 64will be used. 65The configuration files contain sections separated by 66.Dq Host 67specifications, and that section is only applied for hosts that 68match one of the patterns given in the specification. 69The matched host name is usually the one given on the command line 70(see the 71.Cm CanonicalizeHostname 72option for exceptions.) 73.Pp 74Since the first obtained value for each parameter is used, more 75host-specific declarations should be given near the beginning of the 76file, and general defaults at the end. 77.Pp 78The configuration file has the following format: 79.Pp 80Empty lines and lines starting with 81.Ql # 82are comments. 83Otherwise a line is of the format 84.Dq keyword arguments . 85Configuration options may be separated by whitespace or 86optional whitespace and exactly one 87.Ql = ; 88the latter format is useful to avoid the need to quote whitespace 89when specifying configuration options using the 90.Nm ssh , 91.Nm scp , 92and 93.Nm sftp 94.Fl o 95option. 96Arguments may optionally be enclosed in double quotes 97.Pq \&" 98in order to represent arguments containing spaces. 99.Pp 100The possible 101keywords and their meanings are as follows (note that 102keywords are case-insensitive and arguments are case-sensitive): 103.Bl -tag -width Ds 104.It Cm Host 105Restricts the following declarations (up to the next 106.Cm Host 107or 108.Cm Match 109keyword) to be only for those hosts that match one of the patterns 110given after the keyword. 111If more than one pattern is provided, they should be separated by whitespace. 112A single 113.Ql * 114as a pattern can be used to provide global 115defaults for all hosts. 116The host is usually the 117.Ar hostname 118argument given on the command line 119(see the 120.Cm CanonicalizeHostname 121option for exceptions.) 122.Pp 123A pattern entry may be negated by prefixing it with an exclamation mark 124.Pq Sq !\& . 125If a negated entry is matched, then the 126.Cm Host 127entry is ignored, regardless of whether any other patterns on the line 128match. 129Negated matches are therefore useful to provide exceptions for wildcard 130matches. 131.Pp 132See 133.Sx PATTERNS 134for more information on patterns. 135.It Cm Match 136Restricts the following declarations (up to the next 137.Cm Host 138or 139.Cm Match 140keyword) to be used only when the conditions following the 141.Cm Match 142keyword are satisfied. 143Match conditions are specified using one or more criteria 144or the single token 145.Cm all 146which always matches. 147The available criteria keywords are: 148.Cm canonical , 149.Cm exec , 150.Cm host , 151.Cm originalhost , 152.Cm user , 153and 154.Cm localuser . 155The 156.Cm all 157criteria must appear alone or immediately after 158.Cm canonical . 159Other criteria may be combined arbitrarily. 160All criteria but 161.Cm all 162and 163.Cm canonical 164require an argument. 165Criteria may be negated by prepending an exclamation mark 166.Pq Sq !\& . 167.Pp 168The 169.Cm canonical 170keyword matches only when the configuration file is being re-parsed 171after hostname canonicalization (see the 172.Cm CanonicalizeHostname 173option.) 174This may be useful to specify conditions that work with canonical host 175names only. 176The 177.Cm exec 178keyword executes the specified command under the user's shell. 179If the command returns a zero exit status then the condition is considered true. 180Commands containing whitespace characters must be quoted. 181The following character sequences in the command will be expanded prior to 182execution: 183.Ql %L 184will be substituted by the first component of the local host name, 185.Ql %l 186will be substituted by the local host name (including any domain name), 187.Ql %h 188will be substituted by the target host name, 189.Ql %n 190will be substituted by the original target host name 191specified on the command-line, 192.Ql %p 193the destination port, 194.Ql %r 195by the remote login username, and 196.Ql %u 197by the username of the user running 198.Xr ssh 1 . 199.Pp 200The other keywords' criteria must be single entries or comma-separated 201lists and may use the wildcard and negation operators described in the 202.Sx PATTERNS 203section. 204The criteria for the 205.Cm host 206keyword are matched against the target hostname, after any substitution 207by the 208.Cm Hostname 209or 210.Cm CanonicalizeHostname 211options. 212The 213.Cm originalhost 214keyword matches against the hostname as it was specified on the command-line. 215The 216.Cm user 217keyword matches against the target username on the remote host. 218The 219.Cm localuser 220keyword matches against the name of the local user running 221.Xr ssh 1 222(this keyword may be useful in system-wide 223.Nm 224files). 225.It Cm AddKeysToAgent 226Specifies whether keys should be automatically added to a running 227.Xr ssh-agent 1 . 228If this option is set to 229.Dq yes 230and a key is loaded from a file, the key and its passphrase are added to 231the agent with the default lifetime, as if by 232.Xr ssh-add 1 . 233If this option is set to 234.Dq ask , 235.Nm ssh 236will require confirmation using the 237.Ev SSH_ASKPASS 238program before adding a key (see 239.Xr ssh-add 1 240for details). 241If this option is set to 242.Dq confirm , 243each use of the key must be confirmed, as if the 244.Fl c 245option was specified to 246.Xr ssh-add 1 . 247If this option is set to 248.Dq no , 249no keys are added to the agent. 250The argument must be 251.Dq yes , 252.Dq confirm , 253.Dq ask , 254or 255.Dq no . 256The default is 257.Dq no . 258.It Cm AddressFamily 259Specifies which address family to use when connecting. 260Valid arguments are 261.Dq any , 262.Dq inet 263(use IPv4 only), or 264.Dq inet6 265(use IPv6 only). 266The default is 267.Dq any . 268.It Cm BatchMode 269If set to 270.Dq yes , 271passphrase/password querying will be disabled. 272This option is useful in scripts and other batch jobs where no user 273is present to supply the password. 274The argument must be 275.Dq yes 276or 277.Dq no . 278The default is 279.Dq no . 280.It Cm BindAddress 281Use the specified address on the local machine as the source address of 282the connection. 283Only useful on systems with more than one address. 284Note that this option does not work if 285.Cm UsePrivilegedPort 286is set to 287.Dq yes . 288.It Cm CanonicalDomains 289When 290.Cm CanonicalizeHostname 291is enabled, this option specifies the list of domain suffixes in which to 292search for the specified destination host. 293.It Cm CanonicalizeFallbackLocal 294Specifies whether to fail with an error when hostname canonicalization fails. 295The default, 296.Dq yes , 297will attempt to look up the unqualified hostname using the system resolver's 298search rules. 299A value of 300.Dq no 301will cause 302.Xr ssh 1 303to fail instantly if 304.Cm CanonicalizeHostname 305is enabled and the target hostname cannot be found in any of the domains 306specified by 307.Cm CanonicalDomains . 308.It Cm CanonicalizeHostname 309Controls whether explicit hostname canonicalization is performed. 310The default, 311.Dq no , 312is not to perform any name rewriting and let the system resolver handle all 313hostname lookups. 314If set to 315.Dq yes 316then, for connections that do not use a 317.Cm ProxyCommand , 318.Xr ssh 1 319will attempt to canonicalize the hostname specified on the command line 320using the 321.Cm CanonicalDomains 322suffixes and 323.Cm CanonicalizePermittedCNAMEs 324rules. 325If 326.Cm CanonicalizeHostname 327is set to 328.Dq always , 329then canonicalization is applied to proxied connections too. 330.Pp 331If this option is enabled, then the configuration files are processed 332again using the new target name to pick up any new configuration in matching 333.Cm Host 334and 335.Cm Match 336stanzas. 337.It Cm CanonicalizeMaxDots 338Specifies the maximum number of dot characters in a hostname before 339canonicalization is disabled. 340The default, 341.Dq 1 , 342allows a single dot (i.e. hostname.subdomain). 343.It Cm CanonicalizePermittedCNAMEs 344Specifies rules to determine whether CNAMEs should be followed when 345canonicalizing hostnames. 346The rules consist of one or more arguments of 347.Ar source_domain_list : Ns Ar target_domain_list , 348where 349.Ar source_domain_list 350is a pattern-list of domains that may follow CNAMEs in canonicalization, 351and 352.Ar target_domain_list 353is a pattern-list of domains that they may resolve to. 354.Pp 355For example, 356.Dq *.a.example.com:*.b.example.com,*.c.example.com 357will allow hostnames matching 358.Dq *.a.example.com 359to be canonicalized to names in the 360.Dq *.b.example.com 361or 362.Dq *.c.example.com 363domains. 364.It Cm CertificateFile 365Specifies a file from which the user's certificate is read. 366A corresponding private key must be provided separately in order 367to use this certificate either 368from an 369.Cm IdentityFile 370directive or 371.Fl i 372flag to 373.Xr ssh 1 , 374via 375.Xr ssh-agent 1 , 376or via a 377.Cm PKCS11Provider . 378.Pp 379The file name may use the tilde 380syntax to refer to a user's home directory or one of the following 381escape characters: 382.Ql %d 383(local user's home directory), 384.Ql %u 385(local user name), 386.Ql %l 387(local host name), 388.Ql %h 389(remote host name) or 390.Ql %r 391(remote user name). 392.Pp 393It is possible to have multiple certificate files specified in 394configuration files; these certificates will be tried in sequence. 395Multiple 396.Cm CertificateFile 397directives will add to the list of certificates used for 398authentication. 399.It Cm ChallengeResponseAuthentication 400Specifies whether to use challenge-response authentication. 401The argument to this keyword must be 402.Dq yes 403or 404.Dq no . 405The default is 406.Dq yes . 407.It Cm CheckHostIP 408If this flag is set to 409.Dq yes , 410.Xr ssh 1 411will additionally check the host IP address in the 412.Pa known_hosts 413file. 414This allows ssh to detect if a host key changed due to DNS spoofing 415and will add addresses of destination hosts to 416.Pa ~/.ssh/known_hosts 417in the process, regardless of the setting of 418.Cm StrictHostKeyChecking . 419If the option is set to 420.Dq no , 421the check will not be executed. 422The default is 423.Dq no . 424.It Cm Cipher 425Specifies the cipher to use for encrypting the session 426in protocol version 1. 427Currently, 428.Dq blowfish , 429.Dq 3des , 430and 431.Dq des 432are supported. 433.Ar des 434is only supported in the 435.Xr ssh 1 436client for interoperability with legacy protocol 1 implementations 437that do not support the 438.Ar 3des 439cipher. 440Its use is strongly discouraged due to cryptographic weaknesses. 441The default is 442.Dq 3des . 443.It Cm Ciphers 444Specifies the ciphers allowed for protocol version 2 445in order of preference. 446Multiple ciphers must be comma-separated. 447If the specified value begins with a 448.Sq + 449character, then the specified ciphers will be appended to the default set 450instead of replacing them. 451.Pp 452The supported ciphers are: 453.Pp 454.Bl -item -compact -offset indent 455.It 4563des-cbc 457.It 458aes128-cbc 459.It 460aes192-cbc 461.It 462aes256-cbc 463.It 464aes128-ctr 465.It 466aes192-ctr 467.It 468aes256-ctr 469.It 470aes128-gcm@openssh.com 471.It 472aes256-gcm@openssh.com 473.It 474arcfour 475.It 476arcfour128 477.It 478arcfour256 479.It 480blowfish-cbc 481.It 482cast128-cbc 483.It 484chacha20-poly1305@openssh.com 485.El 486.Pp 487The default is: 488.Bd -literal -offset indent 489chacha20-poly1305@openssh.com, 490aes128-ctr,aes192-ctr,aes256-ctr, 491aes128-gcm@openssh.com,aes256-gcm@openssh.com, 492aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc 493.Ed 494.Pp 495The list of available ciphers may also be obtained using the 496.Fl Q 497option of 498.Xr ssh 1 499with an argument of 500.Dq cipher . 501.It Cm ClearAllForwardings 502Specifies that all local, remote, and dynamic port forwardings 503specified in the configuration files or on the command line be 504cleared. 505This option is primarily useful when used from the 506.Xr ssh 1 507command line to clear port forwardings set in 508configuration files, and is automatically set by 509.Xr scp 1 510and 511.Xr sftp 1 . 512The argument must be 513.Dq yes 514or 515.Dq no . 516The default is 517.Dq no . 518.It Cm Compression 519Specifies whether to use compression. 520The argument must be 521.Dq yes 522or 523.Dq no . 524The default is 525.Dq no . 526.It Cm CompressionLevel 527Specifies the compression level to use if compression is enabled. 528The argument must be an integer from 1 (fast) to 9 (slow, best). 529The default level is 6, which is good for most applications. 530The meaning of the values is the same as in 531.Xr gzip 1 . 532Note that this option applies to protocol version 1 only. 533.It Cm ConnectionAttempts 534Specifies the number of tries (one per second) to make before exiting. 535The argument must be an integer. 536This may be useful in scripts if the connection sometimes fails. 537The default is 1. 538.It Cm ConnectTimeout 539Specifies the timeout (in seconds) used when connecting to the 540SSH server, instead of using the default system TCP timeout. 541This value is used only when the target is down or really unreachable, 542not when it refuses the connection. 543.It Cm ControlMaster 544Enables the sharing of multiple sessions over a single network connection. 545When set to 546.Dq yes , 547.Xr ssh 1 548will listen for connections on a control socket specified using the 549.Cm ControlPath 550argument. 551Additional sessions can connect to this socket using the same 552.Cm ControlPath 553with 554.Cm ControlMaster 555set to 556.Dq no 557(the default). 558These sessions will try to reuse the master instance's network connection 559rather than initiating new ones, but will fall back to connecting normally 560if the control socket does not exist, or is not listening. 561.Pp 562Setting this to 563.Dq ask 564will cause ssh 565to listen for control connections, but require confirmation using 566.Xr ssh-askpass 1 . 567If the 568.Cm ControlPath 569cannot be opened, 570ssh will continue without connecting to a master instance. 571.Pp 572X11 and 573.Xr ssh-agent 1 574forwarding is supported over these multiplexed connections, however the 575display and agent forwarded will be the one belonging to the master 576connection i.e. it is not possible to forward multiple displays or agents. 577.Pp 578Two additional options allow for opportunistic multiplexing: try to use a 579master connection but fall back to creating a new one if one does not already 580exist. 581These options are: 582.Dq auto 583and 584.Dq autoask . 585The latter requires confirmation like the 586.Dq ask 587option. 588.It Cm ControlPath 589Specify the path to the control socket used for connection sharing as described 590in the 591.Cm ControlMaster 592section above or the string 593.Dq none 594to disable connection sharing. 595In the path, 596.Ql %L 597will be substituted by the first component of the local host name, 598.Ql %l 599will be substituted by the local host name (including any domain name), 600.Ql %h 601will be substituted by the target host name, 602.Ql %n 603will be substituted by the original target host name 604specified on the command line, 605.Ql %p 606the destination port, 607.Ql %r 608by the remote login username, 609.Ql %u 610by the username and 611.Ql %i 612by the numeric user ID (uid) of the user running 613.Xr ssh 1 , 614and 615.Ql \&%C 616by a hash of the concatenation: %l%h%p%r. 617It is recommended that any 618.Cm ControlPath 619used for opportunistic connection sharing include 620at least %h, %p, and %r (or alternatively %C) and be placed in a directory 621that is not writable by other users. 622This ensures that shared connections are uniquely identified. 623.It Cm ControlPersist 624When used in conjunction with 625.Cm ControlMaster , 626specifies that the master connection should remain open 627in the background (waiting for future client connections) 628after the initial client connection has been closed. 629If set to 630.Dq no , 631then the master connection will not be placed into the background, 632and will close as soon as the initial client connection is closed. 633If set to 634.Dq yes 635or 636.Dq 0 , 637then the master connection will remain in the background indefinitely 638(until killed or closed via a mechanism such as the 639.Xr ssh 1 640.Dq Fl O No exit 641option). 642If set to a time in seconds, or a time in any of the formats documented in 643.Xr sshd_config 5 , 644then the backgrounded master connection will automatically terminate 645after it has remained idle (with no client connections) for the 646specified time. 647.It Cm DynamicForward 648Specifies that a TCP port on the local machine be forwarded 649over the secure channel, and the application 650protocol is then used to determine where to connect to from the 651remote machine. 652.Pp 653The argument must be 654.Sm off 655.Oo Ar bind_address : Oc Ar port . 656.Sm on 657IPv6 addresses can be specified by enclosing addresses in square brackets. 658By default, the local port is bound in accordance with the 659.Cm GatewayPorts 660setting. 661However, an explicit 662.Ar bind_address 663may be used to bind the connection to a specific address. 664The 665.Ar bind_address 666of 667.Dq localhost 668indicates that the listening port be bound for local use only, while an 669empty address or 670.Sq * 671indicates that the port should be available from all interfaces. 672.Pp 673Currently the SOCKS4 and SOCKS5 protocols are supported, and 674.Xr ssh 1 675will act as a SOCKS server. 676Multiple forwardings may be specified, and 677additional forwardings can be given on the command line. 678Only the superuser can forward privileged ports. 679.It Cm EnableSSHKeysign 680Setting this option to 681.Dq yes 682in the global client configuration file 683.Pa /etc/ssh/ssh_config 684enables the use of the helper program 685.Xr ssh-keysign 8 686during 687.Cm HostbasedAuthentication . 688The argument must be 689.Dq yes 690or 691.Dq no . 692The default is 693.Dq no . 694This option should be placed in the non-hostspecific section. 695See 696.Xr ssh-keysign 8 697for more information. 698.It Cm EscapeChar 699Sets the escape character (default: 700.Ql ~ ) . 701The escape character can also 702be set on the command line. 703The argument should be a single character, 704.Ql ^ 705followed by a letter, or 706.Dq none 707to disable the escape 708character entirely (making the connection transparent for binary 709data). 710.It Cm ExitOnForwardFailure 711Specifies whether 712.Xr ssh 1 713should terminate the connection if it cannot set up all requested 714dynamic, tunnel, local, and remote port forwardings, (e.g.\& 715if either end is unable to bind and listen on a specified port). 716Note that 717.Cm ExitOnForwardFailure 718does not apply to connections made over port forwardings and will not, 719for example, cause 720.Xr ssh 1 721to exit if TCP connections to the ultimate forwarding destination fail. 722The argument must be 723.Dq yes 724or 725.Dq no . 726The default is 727.Dq no . 728.It Cm FingerprintHash 729Specifies the hash algorithm used when displaying key fingerprints. 730Valid options are: 731.Dq md5 732and 733.Dq sha256 . 734The default is 735.Dq sha256 . 736.It Cm ForwardAgent 737Specifies whether the connection to the authentication agent (if any) 738will be forwarded to the remote machine. 739The argument must be 740.Dq yes 741or 742.Dq no . 743The default is 744.Dq no . 745.Pp 746Agent forwarding should be enabled with caution. 747Users with the ability to bypass file permissions on the remote host 748(for the agent's Unix-domain socket) 749can access the local agent through the forwarded connection. 750An attacker cannot obtain key material from the agent, 751however they can perform operations on the keys that enable them to 752authenticate using the identities loaded into the agent. 753.It Cm ForwardX11 754Specifies whether X11 connections will be automatically redirected 755over the secure channel and 756.Ev DISPLAY 757set. 758The argument must be 759.Dq yes 760or 761.Dq no . 762The default is 763.Dq no . 764.Pp 765X11 forwarding should be enabled with caution. 766Users with the ability to bypass file permissions on the remote host 767(for the user's X11 authorization database) 768can access the local X11 display through the forwarded connection. 769An attacker may then be able to perform activities such as keystroke monitoring 770if the 771.Cm ForwardX11Trusted 772option is also enabled. 773.It Cm ForwardX11Timeout 774Specify a timeout for untrusted X11 forwarding 775using the format described in the 776TIME FORMATS section of 777.Xr sshd_config 5 . 778X11 connections received by 779.Xr ssh 1 780after this time will be refused. 781The default is to disable untrusted X11 forwarding after twenty minutes has 782elapsed. 783.It Cm ForwardX11Trusted 784If this option is set to 785.Dq yes , 786remote X11 clients will have full access to the original X11 display. 787.Pp 788If this option is set to 789.Dq no , 790remote X11 clients will be considered untrusted and prevented 791from stealing or tampering with data belonging to trusted X11 792clients. 793Furthermore, the 794.Xr xauth 1 795token used for the session will be set to expire after 20 minutes. 796Remote clients will be refused access after this time. 797.Pp 798The default is 799.Dq no . 800.Pp 801See the X11 SECURITY extension specification for full details on 802the restrictions imposed on untrusted clients. 803.It Cm GatewayPorts 804Specifies whether remote hosts are allowed to connect to local 805forwarded ports. 806By default, 807.Xr ssh 1 808binds local port forwardings to the loopback address. 809This prevents other remote hosts from connecting to forwarded ports. 810.Cm GatewayPorts 811can be used to specify that ssh 812should bind local port forwardings to the wildcard address, 813thus allowing remote hosts to connect to forwarded ports. 814The argument must be 815.Dq yes 816or 817.Dq no . 818The default is 819.Dq no . 820.It Cm GlobalKnownHostsFile 821Specifies one or more files to use for the global 822host key database, separated by whitespace. 823The default is 824.Pa /etc/ssh/ssh_known_hosts , 825.Pa /etc/ssh/ssh_known_hosts2 . 826.It Cm GSSAPIAuthentication 827Specifies whether user authentication based on GSSAPI is allowed. 828The default is 829.Dq no . 830.It Cm GSSAPIDelegateCredentials 831Forward (delegate) credentials to the server. 832The default is 833.Dq no . 834.It Cm HashKnownHosts 835Indicates that 836.Xr ssh 1 837should hash host names and addresses when they are added to 838.Pa ~/.ssh/known_hosts . 839These hashed names may be used normally by 840.Xr ssh 1 841and 842.Xr sshd 8 , 843but they do not reveal identifying information should the file's contents 844be disclosed. 845The default is 846.Dq no . 847Note that existing names and addresses in known hosts files 848will not be converted automatically, 849but may be manually hashed using 850.Xr ssh-keygen 1 . 851.It Cm HostbasedAuthentication 852Specifies whether to try rhosts based authentication with public key 853authentication. 854The argument must be 855.Dq yes 856or 857.Dq no . 858The default is 859.Dq no . 860.It Cm HostbasedKeyTypes 861Specifies the key types that will be used for hostbased authentication 862as a comma-separated pattern list. 863Alternately if the specified value begins with a 864.Sq + 865character, then the specified key types will be appended to the default set 866instead of replacing them. 867The default for this option is: 868.Bd -literal -offset 3n 869ecdsa-sha2-nistp256-cert-v01@openssh.com, 870ecdsa-sha2-nistp384-cert-v01@openssh.com, 871ecdsa-sha2-nistp521-cert-v01@openssh.com, 872ssh-ed25519-cert-v01@openssh.com, 873ssh-rsa-cert-v01@openssh.com, 874ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521, 875ssh-ed25519,ssh-rsa 876.Ed 877.Pp 878The 879.Fl Q 880option of 881.Xr ssh 1 882may be used to list supported key types. 883.It Cm HostKeyAlgorithms 884Specifies the host key algorithms 885that the client wants to use in order of preference. 886Alternately if the specified value begins with a 887.Sq + 888character, then the specified key types will be appended to the default set 889instead of replacing them. 890The default for this option is: 891.Bd -literal -offset 3n 892ecdsa-sha2-nistp256-cert-v01@openssh.com, 893ecdsa-sha2-nistp384-cert-v01@openssh.com, 894ecdsa-sha2-nistp521-cert-v01@openssh.com, 895ssh-ed25519-cert-v01@openssh.com, 896ssh-rsa-cert-v01@openssh.com, 897ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521, 898ssh-ed25519,ssh-rsa 899.Ed 900.Pp 901If hostkeys are known for the destination host then this default is modified 902to prefer their algorithms. 903.Pp 904The list of available key types may also be obtained using the 905.Fl Q 906option of 907.Xr ssh 1 908with an argument of 909.Dq key . 910.It Cm HostKeyAlias 911Specifies an alias that should be used instead of the 912real host name when looking up or saving the host key 913in the host key database files. 914This option is useful for tunneling SSH connections 915or for multiple servers running on a single host. 916.It Cm HostName 917Specifies the real host name to log into. 918This can be used to specify nicknames or abbreviations for hosts. 919If the hostname contains the character sequence 920.Ql %h , 921then this will be replaced with the host name specified on the command line 922(this is useful for manipulating unqualified names). 923The character sequence 924.Ql %% 925will be replaced by a single 926.Ql % 927character, which may be used when specifying IPv6 link-local addresses. 928.Pp 929The default is the name given on the command line. 930Numeric IP addresses are also permitted (both on the command line and in 931.Cm HostName 932specifications). 933.It Cm IdentitiesOnly 934Specifies that 935.Xr ssh 1 936should only use the authentication identity and certificate files explicitly 937configured in the 938.Nm 939files 940or passed on the 941.Xr ssh 1 942command-line, 943even if 944.Xr ssh-agent 1 945or a 946.Cm PKCS11Provider 947offers more identities. 948The argument to this keyword must be 949.Dq yes 950or 951.Dq no . 952This option is intended for situations where ssh-agent 953offers many different identities. 954The default is 955.Dq no . 956.It Cm IdentityAgent 957Specifies the 958.Ux Ns -domain 959socket used to communicate with the authentication agent. 960.Pp 961This option overrides the 962.Dq SSH_AUTH_SOCK 963environment variable and can be used to select a specific agent. 964Setting the socket name to 965.Dq none 966disables the use of an authentication agent. 967If the string 968.Dq SSH_AUTH_SOCK 969is specified, the location of the socket will be read from the 970.Ev SSH_AUTH_SOCK 971environment variable. 972.Pp 973The socket name may use the tilde 974syntax to refer to a user's home directory or one of the following 975escape characters: 976.Ql %d 977(local user's home directory), 978.Ql %u 979(local user name), 980.Ql %l 981(local host name), 982.Ql %h 983(remote host name) or 984.Ql %r 985(remote user name). 986.It Cm IdentityFile 987Specifies a file from which the user's DSA, ECDSA, Ed25519 or RSA authentication 988identity is read. 989The default is 990.Pa ~/.ssh/identity 991for protocol version 1, and 992.Pa ~/.ssh/id_dsa , 993.Pa ~/.ssh/id_ecdsa , 994.Pa ~/.ssh/id_ed25519 995and 996.Pa ~/.ssh/id_rsa 997for protocol version 2. 998Additionally, any identities represented by the authentication agent 999will be used for authentication unless 1000.Cm IdentitiesOnly 1001is set. 1002If no certificates have been explicitly specified by 1003.Cm CertificateFile , 1004.Xr ssh 1 1005will try to load certificate information from the filename obtained by 1006appending 1007.Pa -cert.pub 1008to the path of a specified 1009.Cm IdentityFile . 1010.Pp 1011The file name may use the tilde 1012syntax to refer to a user's home directory or one of the following 1013escape characters: 1014.Ql %d 1015(local user's home directory), 1016.Ql %u 1017(local user name), 1018.Ql %l 1019(local host name), 1020.Ql %h 1021(remote host name) or 1022.Ql %r 1023(remote user name). 1024.Pp 1025It is possible to have 1026multiple identity files specified in configuration files; all these 1027identities will be tried in sequence. 1028Multiple 1029.Cm IdentityFile 1030directives will add to the list of identities tried (this behaviour 1031differs from that of other configuration directives). 1032.Pp 1033.Cm IdentityFile 1034may be used in conjunction with 1035.Cm IdentitiesOnly 1036to select which identities in an agent are offered during authentication. 1037.Cm IdentityFile 1038may also be used in conjunction with 1039.Cm CertificateFile 1040in order to provide any certificate also needed for authentication with 1041the identity. 1042.It Cm IgnoreUnknown 1043Specifies a pattern-list of unknown options to be ignored if they are 1044encountered in configuration parsing. 1045This may be used to suppress errors if 1046.Nm 1047contains options that are unrecognised by 1048.Xr ssh 1 . 1049It is recommended that 1050.Cm IgnoreUnknown 1051be listed early in the configuration file as it will not be applied 1052to unknown options that appear before it. 1053.It Cm Include 1054Include the specified configuration file(s). 1055Multiple pathnames may be specified and each pathname may contain 1056.Xr glob 3 1057wildcards and, for user configurations, shell-like 1058.Dq ~ 1059references to user home directories. 1060Files without absolute paths are assumed to be in 1061.Pa ~/.ssh 1062if included in a user configuration file or 1063.Pa /etc/ssh 1064if included from the system configuration file. 1065.Cm Include 1066directive may appear inside a 1067.Cm Match 1068or 1069.Cm Host 1070block 1071to perform conditional inclusion. 1072.It Cm IPQoS 1073Specifies the IPv4 type-of-service or DSCP class for connections. 1074Accepted values are 1075.Dq af11 , 1076.Dq af12 , 1077.Dq af13 , 1078.Dq af21 , 1079.Dq af22 , 1080.Dq af23 , 1081.Dq af31 , 1082.Dq af32 , 1083.Dq af33 , 1084.Dq af41 , 1085.Dq af42 , 1086.Dq af43 , 1087.Dq cs0 , 1088.Dq cs1 , 1089.Dq cs2 , 1090.Dq cs3 , 1091.Dq cs4 , 1092.Dq cs5 , 1093.Dq cs6 , 1094.Dq cs7 , 1095.Dq ef , 1096.Dq lowdelay , 1097.Dq throughput , 1098.Dq reliability , 1099or a numeric value. 1100This option may take one or two arguments, separated by whitespace. 1101If one argument is specified, it is used as the packet class unconditionally. 1102If two values are specified, the first is automatically selected for 1103interactive sessions and the second for non-interactive sessions. 1104The default is 1105.Dq lowdelay 1106for interactive sessions and 1107.Dq throughput 1108for non-interactive sessions. 1109.It Cm KbdInteractiveAuthentication 1110Specifies whether to use keyboard-interactive authentication. 1111The argument to this keyword must be 1112.Dq yes 1113or 1114.Dq no . 1115The default is 1116.Dq yes . 1117.It Cm KbdInteractiveDevices 1118Specifies the list of methods to use in keyboard-interactive authentication. 1119Multiple method names must be comma-separated. 1120The default is to use the server specified list. 1121The methods available vary depending on what the server supports. 1122For an OpenSSH server, 1123it may be zero or more of: 1124.Dq bsdauth , 1125.Dq pam , 1126and 1127.Dq skey . 1128.It Cm KexAlgorithms 1129Specifies the available KEX (Key Exchange) algorithms. 1130Multiple algorithms must be comma-separated. 1131Alternately if the specified value begins with a 1132.Sq + 1133character, then the specified methods will be appended to the default set 1134instead of replacing them. 1135The default is: 1136.Bd -literal -offset indent 1137curve25519-sha256@libssh.org, 1138ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521, 1139diffie-hellman-group-exchange-sha256, 1140diffie-hellman-group-exchange-sha1, 1141diffie-hellman-group14-sha1 1142.Ed 1143.Pp 1144The list of available key exchange algorithms may also be obtained using the 1145.Fl Q 1146option of 1147.Xr ssh 1 1148with an argument of 1149.Dq kex . 1150.It Cm LocalCommand 1151Specifies a command to execute on the local machine after successfully 1152connecting to the server. 1153The command string extends to the end of the line, and is executed with 1154the user's shell. 1155The following escape character substitutions will be performed: 1156.Ql %d 1157(local user's home directory), 1158.Ql %h 1159(remote host name), 1160.Ql %l 1161(local host name), 1162.Ql %n 1163(host name as provided on the command line), 1164.Ql %p 1165(remote port), 1166.Ql %r 1167(remote user name) or 1168.Ql %u 1169(local user name) or 1170.Ql \&%C 1171by a hash of the concatenation: %l%h%p%r. 1172.Pp 1173The command is run synchronously and does not have access to the 1174session of the 1175.Xr ssh 1 1176that spawned it. 1177It should not be used for interactive commands. 1178.Pp 1179This directive is ignored unless 1180.Cm PermitLocalCommand 1181has been enabled. 1182.It Cm LocalForward 1183Specifies that a TCP port on the local machine be forwarded over 1184the secure channel to the specified host and port from the remote machine. 1185The first argument must be 1186.Sm off 1187.Oo Ar bind_address : Oc Ar port 1188.Sm on 1189and the second argument must be 1190.Ar host : Ns Ar hostport . 1191IPv6 addresses can be specified by enclosing addresses in square brackets. 1192Multiple forwardings may be specified, and additional forwardings can be 1193given on the command line. 1194Only the superuser can forward privileged ports. 1195By default, the local port is bound in accordance with the 1196.Cm GatewayPorts 1197setting. 1198However, an explicit 1199.Ar bind_address 1200may be used to bind the connection to a specific address. 1201The 1202.Ar bind_address 1203of 1204.Dq localhost 1205indicates that the listening port be bound for local use only, while an 1206empty address or 1207.Sq * 1208indicates that the port should be available from all interfaces. 1209.It Cm LogLevel 1210Gives the verbosity level that is used when logging messages from 1211.Xr ssh 1 . 1212The possible values are: 1213QUIET, FATAL, ERROR, INFO, VERBOSE, DEBUG, DEBUG1, DEBUG2, and DEBUG3. 1214The default is INFO. 1215DEBUG and DEBUG1 are equivalent. 1216DEBUG2 and DEBUG3 each specify higher levels of verbose output. 1217.It Cm MACs 1218Specifies the MAC (message authentication code) algorithms 1219in order of preference. 1220The MAC algorithm is used for data integrity protection. 1221Multiple algorithms must be comma-separated. 1222If the specified value begins with a 1223.Sq + 1224character, then the specified algorithms will be appended to the default set 1225instead of replacing them. 1226.Pp 1227The algorithms that contain 1228.Dq -etm 1229calculate the MAC after encryption (encrypt-then-mac). 1230These are considered safer and their use recommended. 1231.Pp 1232The default is: 1233.Bd -literal -offset indent 1234umac-64-etm@openssh.com,umac-128-etm@openssh.com, 1235hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com, 1236hmac-sha1-etm@openssh.com, 1237umac-64@openssh.com,umac-128@openssh.com, 1238hmac-sha2-256,hmac-sha2-512,hmac-sha1 1239.Ed 1240.Pp 1241The list of available MAC algorithms may also be obtained using the 1242.Fl Q 1243option of 1244.Xr ssh 1 1245with an argument of 1246.Dq mac . 1247.It Cm NoHostAuthenticationForLocalhost 1248This option can be used if the home directory is shared across machines. 1249In this case localhost will refer to a different machine on each of 1250the machines and the user will get many warnings about changed host keys. 1251However, this option disables host authentication for localhost. 1252The argument to this keyword must be 1253.Dq yes 1254or 1255.Dq no . 1256The default is to check the host key for localhost. 1257.It Cm NumberOfPasswordPrompts 1258Specifies the number of password prompts before giving up. 1259The argument to this keyword must be an integer. 1260The default is 3. 1261.It Cm PasswordAuthentication 1262Specifies whether to use password authentication. 1263The argument to this keyword must be 1264.Dq yes 1265or 1266.Dq no . 1267The default is 1268.Dq yes . 1269.It Cm PermitLocalCommand 1270Allow local command execution via the 1271.Ic LocalCommand 1272option or using the 1273.Ic !\& Ns Ar command 1274escape sequence in 1275.Xr ssh 1 . 1276The argument must be 1277.Dq yes 1278or 1279.Dq no . 1280The default is 1281.Dq no . 1282.It Cm PKCS11Provider 1283Specifies which PKCS#11 provider to use. 1284The argument to this keyword is the PKCS#11 shared library 1285.Xr ssh 1 1286should use to communicate with a PKCS#11 token providing the user's 1287private RSA key. 1288.It Cm Port 1289Specifies the port number to connect on the remote host. 1290The default is 22. 1291.It Cm PreferredAuthentications 1292Specifies the order in which the client should try authentication methods. 1293This allows a client to prefer one method (e.g.\& 1294.Cm keyboard-interactive ) 1295over another method (e.g.\& 1296.Cm password ) . 1297The default is: 1298.Bd -literal -offset indent 1299gssapi-with-mic,hostbased,publickey, 1300keyboard-interactive,password 1301.Ed 1302.It Cm Protocol 1303Specifies the protocol versions 1304.Xr ssh 1 1305should support in order of preference. 1306The possible values are 1307.Sq 1 1308and 1309.Sq 2 . 1310Multiple versions must be comma-separated. 1311When this option is set to 1312.Dq 2,1 1313.Nm ssh 1314will try version 2 and fall back to version 1 1315if version 2 is not available. 1316The default is 1317.Sq 2 . 1318Protocol 1 suffers from a number of cryptographic weaknesses and should 1319not be used. 1320It is only offered to support legacy devices. 1321.It Cm ProxyCommand 1322Specifies the command to use to connect to the server. 1323The command 1324string extends to the end of the line, and is executed 1325using the user's shell 1326.Ql exec 1327directive to avoid a lingering shell process. 1328.Pp 1329In the command string, any occurrence of 1330.Ql %h 1331will be substituted by the host name to 1332connect, 1333.Ql %p 1334by the port, and 1335.Ql %r 1336by the remote user name. 1337The command can be basically anything, 1338and should read from its standard input and write to its standard output. 1339It should eventually connect an 1340.Xr sshd 8 1341server running on some machine, or execute 1342.Ic sshd -i 1343somewhere. 1344Host key management will be done using the 1345HostName of the host being connected (defaulting to the name typed by 1346the user). 1347Setting the command to 1348.Dq none 1349disables this option entirely. 1350Note that 1351.Cm CheckHostIP 1352is not available for connects with a proxy command. 1353.Pp 1354This directive is useful in conjunction with 1355.Xr nc 1 1356and its proxy support. 1357For example, the following directive would connect via an HTTP proxy at 1358192.0.2.0: 1359.Bd -literal -offset 3n 1360ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 1361.Ed 1362.It Cm ProxyJump 1363Specifies one or more jump proxies as 1364.Xo 1365.Sm off 1366.Op Ar user No @ 1367.Ar host 1368.Op : Ns Ar port 1369.Sm on 1370.Xc . 1371Multiple proxies may be separated by comma characters and will be visited 1372sequentially. 1373Setting this option will cause 1374.Xr ssh 1 1375to connect to the target host by first making a 1376.Xr ssh 1 1377connection to the specified 1378.Cm ProxyJump 1379host and then establishing a 1380TCP forwarding to the ultimate target from there. 1381.Pp 1382Note that this option will compete with the 1383.Cm ProxyCommand 1384option - whichever is specified first will prevent later instances of the 1385other from taking effect. 1386.It Cm ProxyUseFdpass 1387Specifies that 1388.Cm ProxyCommand 1389will pass a connected file descriptor back to 1390.Xr ssh 1 1391instead of continuing to execute and pass data. 1392The default is 1393.Dq no . 1394.It Cm PubkeyAcceptedKeyTypes 1395Specifies the key types that will be used for public key authentication 1396as a comma-separated pattern list. 1397Alternately if the specified value begins with a 1398.Sq + 1399character, then the key types after it will be appended to the default 1400instead of replacing it. 1401The default for this option is: 1402.Bd -literal -offset 3n 1403ecdsa-sha2-nistp256-cert-v01@openssh.com, 1404ecdsa-sha2-nistp384-cert-v01@openssh.com, 1405ecdsa-sha2-nistp521-cert-v01@openssh.com, 1406ssh-ed25519-cert-v01@openssh.com, 1407ssh-rsa-cert-v01@openssh.com, 1408ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521, 1409ssh-ed25519,ssh-rsa 1410.Ed 1411.Pp 1412The 1413.Fl Q 1414option of 1415.Xr ssh 1 1416may be used to list supported key types. 1417.It Cm PubkeyAuthentication 1418Specifies whether to try public key authentication. 1419The argument to this keyword must be 1420.Dq yes 1421or 1422.Dq no . 1423The default is 1424.Dq yes . 1425.It Cm RekeyLimit 1426Specifies the maximum amount of data that may be transmitted before the 1427session key is renegotiated, optionally followed a maximum amount of 1428time that may pass before the session key is renegotiated. 1429The first argument is specified in bytes and may have a suffix of 1430.Sq K , 1431.Sq M , 1432or 1433.Sq G 1434to indicate Kilobytes, Megabytes, or Gigabytes, respectively. 1435The default is between 1436.Sq 1G 1437and 1438.Sq 4G , 1439depending on the cipher. 1440The optional second value is specified in seconds and may use any of the 1441units documented in the 1442TIME FORMATS section of 1443.Xr sshd_config 5 . 1444The default value for 1445.Cm RekeyLimit 1446is 1447.Dq default none , 1448which means that rekeying is performed after the cipher's default amount 1449of data has been sent or received and no time based rekeying is done. 1450.It Cm RemoteForward 1451Specifies that a TCP port on the remote machine be forwarded over 1452the secure channel to the specified host and port from the local machine. 1453The first argument must be 1454.Sm off 1455.Oo Ar bind_address : Oc Ar port 1456.Sm on 1457and the second argument must be 1458.Ar host : Ns Ar hostport . 1459IPv6 addresses can be specified by enclosing addresses in square brackets. 1460Multiple forwardings may be specified, and additional 1461forwardings can be given on the command line. 1462Privileged ports can be forwarded only when 1463logging in as root on the remote machine. 1464.Pp 1465If the 1466.Ar port 1467argument is 1468.Ql 0 , 1469the listen port will be dynamically allocated on the server and reported 1470to the client at run time. 1471.Pp 1472If the 1473.Ar bind_address 1474is not specified, the default is to only bind to loopback addresses. 1475If the 1476.Ar bind_address 1477is 1478.Ql * 1479or an empty string, then the forwarding is requested to listen on all 1480interfaces. 1481Specifying a remote 1482.Ar bind_address 1483will only succeed if the server's 1484.Cm GatewayPorts 1485option is enabled (see 1486.Xr sshd_config 5 ) . 1487.It Cm RequestTTY 1488Specifies whether to request a pseudo-tty for the session. 1489The argument may be one of: 1490.Dq no 1491(never request a TTY), 1492.Dq yes 1493(always request a TTY when standard input is a TTY), 1494.Dq force 1495(always request a TTY) or 1496.Dq auto 1497(request a TTY when opening a login session). 1498This option mirrors the 1499.Fl t 1500and 1501.Fl T 1502flags for 1503.Xr ssh 1 . 1504.It Cm RevokedHostKeys 1505Specifies revoked host public keys. 1506Keys listed in this file will be refused for host authentication. 1507Note that if this file does not exist or is not readable, 1508then host authentication will be refused for all hosts. 1509Keys may be specified as a text file, listing one public key per line, or as 1510an OpenSSH Key Revocation List (KRL) as generated by 1511.Xr ssh-keygen 1 . 1512For more information on KRLs, see the KEY REVOCATION LISTS section in 1513.Xr ssh-keygen 1 . 1514.It Cm RhostsRSAAuthentication 1515Specifies whether to try rhosts based authentication with RSA host 1516authentication. 1517The argument must be 1518.Dq yes 1519or 1520.Dq no . 1521The default is 1522.Dq no . 1523This option applies to protocol version 1 only and requires 1524.Xr ssh 1 1525to be setuid root. 1526.It Cm RSAAuthentication 1527Specifies whether to try RSA authentication. 1528The argument to this keyword must be 1529.Dq yes 1530or 1531.Dq no . 1532RSA authentication will only be 1533attempted if the identity file exists, or an authentication agent is 1534running. 1535The default is 1536.Dq yes . 1537Note that this option applies to protocol version 1 only. 1538.It Cm SendEnv 1539Specifies what variables from the local 1540.Xr environ 7 1541should be sent to the server. 1542The server must also support it, and the server must be configured to 1543accept these environment variables. 1544Note that the 1545.Ev TERM 1546environment variable is always sent whenever a 1547pseudo-terminal is requested as it is required by the protocol. 1548Refer to 1549.Cm AcceptEnv 1550in 1551.Xr sshd_config 5 1552for how to configure the server. 1553Variables are specified by name, which may contain wildcard characters. 1554Multiple environment variables may be separated by whitespace or spread 1555across multiple 1556.Cm SendEnv 1557directives. 1558The default is not to send any environment variables. 1559.Pp 1560See 1561.Sx PATTERNS 1562for more information on patterns. 1563.It Cm ServerAliveCountMax 1564Sets the number of server alive messages (see below) which may be 1565sent without 1566.Xr ssh 1 1567receiving any messages back from the server. 1568If this threshold is reached while server alive messages are being sent, 1569ssh will disconnect from the server, terminating the session. 1570It is important to note that the use of server alive messages is very 1571different from 1572.Cm TCPKeepAlive 1573(below). 1574The server alive messages are sent through the encrypted channel 1575and therefore will not be spoofable. 1576The TCP keepalive option enabled by 1577.Cm TCPKeepAlive 1578is spoofable. 1579The server alive mechanism is valuable when the client or 1580server depend on knowing when a connection has become inactive. 1581.Pp 1582The default value is 3. 1583If, for example, 1584.Cm ServerAliveInterval 1585(see below) is set to 15 and 1586.Cm ServerAliveCountMax 1587is left at the default, if the server becomes unresponsive, 1588ssh will disconnect after approximately 45 seconds. 1589.It Cm ServerAliveInterval 1590Sets a timeout interval in seconds after which if no data has been received 1591from the server, 1592.Xr ssh 1 1593will send a message through the encrypted 1594channel to request a response from the server. 1595The default 1596is 0, indicating that these messages will not be sent to the server. 1597.It Cm StreamLocalBindMask 1598Sets the octal file creation mode mask 1599.Pq umask 1600used when creating a Unix-domain socket file for local or remote 1601port forwarding. 1602This option is only used for port forwarding to a Unix-domain socket file. 1603.Pp 1604The default value is 0177, which creates a Unix-domain socket file that is 1605readable and writable only by the owner. 1606Note that not all operating systems honor the file mode on Unix-domain 1607socket files. 1608.It Cm StreamLocalBindUnlink 1609Specifies whether to remove an existing Unix-domain socket file for local 1610or remote port forwarding before creating a new one. 1611If the socket file already exists and 1612.Cm StreamLocalBindUnlink 1613is not enabled, 1614.Nm ssh 1615will be unable to forward the port to the Unix-domain socket file. 1616This option is only used for port forwarding to a Unix-domain socket file. 1617.Pp 1618The argument must be 1619.Dq yes 1620or 1621.Dq no . 1622The default is 1623.Dq no . 1624.It Cm StrictHostKeyChecking 1625If this flag is set to 1626.Dq yes , 1627.Xr ssh 1 1628will never automatically add host keys to the 1629.Pa ~/.ssh/known_hosts 1630file, and refuses to connect to hosts whose host key has changed. 1631This provides maximum protection against trojan horse attacks, 1632though it can be annoying when the 1633.Pa /etc/ssh/ssh_known_hosts 1634file is poorly maintained or when connections to new hosts are 1635frequently made. 1636This option forces the user to manually 1637add all new hosts. 1638If this flag is set to 1639.Dq no , 1640ssh will automatically add new host keys to the 1641user known hosts files. 1642If this flag is set to 1643.Dq ask , 1644new host keys 1645will be added to the user known host files only after the user 1646has confirmed that is what they really want to do, and 1647ssh will refuse to connect to hosts whose host key has changed. 1648The host keys of 1649known hosts will be verified automatically in all cases. 1650The argument must be 1651.Dq yes , 1652.Dq no , 1653or 1654.Dq ask . 1655The default is 1656.Dq ask . 1657.It Cm TCPKeepAlive 1658Specifies whether the system should send TCP keepalive messages to the 1659other side. 1660If they are sent, death of the connection or crash of one 1661of the machines will be properly noticed. 1662However, this means that 1663connections will die if the route is down temporarily, and some people 1664find it annoying. 1665.Pp 1666The default is 1667.Dq yes 1668(to send TCP keepalive messages), and the client will notice 1669if the network goes down or the remote host dies. 1670This is important in scripts, and many users want it too. 1671.Pp 1672To disable TCP keepalive messages, the value should be set to 1673.Dq no . 1674.It Cm Tunnel 1675Request 1676.Xr tun 4 1677device forwarding between the client and the server. 1678The argument must be 1679.Dq yes , 1680.Dq point-to-point 1681(layer 3), 1682.Dq ethernet 1683(layer 2), 1684or 1685.Dq no . 1686Specifying 1687.Dq yes 1688requests the default tunnel mode, which is 1689.Dq point-to-point . 1690The default is 1691.Dq no . 1692.It Cm TunnelDevice 1693Specifies the 1694.Xr tun 4 1695devices to open on the client 1696.Pq Ar local_tun 1697and the server 1698.Pq Ar remote_tun . 1699.Pp 1700The argument must be 1701.Sm off 1702.Ar local_tun Op : Ar remote_tun . 1703.Sm on 1704The devices may be specified by numerical ID or the keyword 1705.Dq any , 1706which uses the next available tunnel device. 1707If 1708.Ar remote_tun 1709is not specified, it defaults to 1710.Dq any . 1711The default is 1712.Dq any:any . 1713.It Cm UpdateHostKeys 1714Specifies whether 1715.Xr ssh 1 1716should accept notifications of additional hostkeys from the server sent 1717after authentication has completed and add them to 1718.Cm UserKnownHostsFile . 1719The argument must be 1720.Dq yes , 1721.Dq no 1722(the default) or 1723.Dq ask . 1724Enabling this option allows learning alternate hostkeys for a server 1725and supports graceful key rotation by allowing a server to send replacement 1726public keys before old ones are removed. 1727Additional hostkeys are only accepted if the key used to authenticate the 1728host was already trusted or explicitly accepted by the user. 1729If 1730.Cm UpdateHostKeys 1731is set to 1732.Dq ask , 1733then the user is asked to confirm the modifications to the known_hosts file. 1734Confirmation is currently incompatible with 1735.Cm ControlPersist , 1736and will be disabled if it is enabled. 1737.Pp 1738Presently, only 1739.Xr sshd 8 1740from OpenSSH 6.8 and greater support the 1741.Dq hostkeys@openssh.com 1742protocol extension used to inform the client of all the server's hostkeys. 1743.It Cm UsePrivilegedPort 1744Specifies whether to use a privileged port for outgoing connections. 1745The argument must be 1746.Dq yes 1747or 1748.Dq no . 1749The default is 1750.Dq no . 1751If set to 1752.Dq yes , 1753.Xr ssh 1 1754must be setuid root. 1755Note that this option must be set to 1756.Dq yes 1757for 1758.Cm RhostsRSAAuthentication 1759with older servers. 1760.It Cm User 1761Specifies the user to log in as. 1762This can be useful when a different user name is used on different machines. 1763This saves the trouble of 1764having to remember to give the user name on the command line. 1765.It Cm UserKnownHostsFile 1766Specifies one or more files to use for the user 1767host key database, separated by whitespace. 1768The default is 1769.Pa ~/.ssh/known_hosts , 1770.Pa ~/.ssh/known_hosts2 . 1771.It Cm VerifyHostKeyDNS 1772Specifies whether to verify the remote key using DNS and SSHFP resource 1773records. 1774If this option is set to 1775.Dq yes , 1776the client will implicitly trust keys that match a secure fingerprint 1777from DNS. 1778Insecure fingerprints will be handled as if this option was set to 1779.Dq ask . 1780If this option is set to 1781.Dq ask , 1782information on fingerprint match will be displayed, but the user will still 1783need to confirm new host keys according to the 1784.Cm StrictHostKeyChecking 1785option. 1786The argument must be 1787.Dq yes , 1788.Dq no , 1789or 1790.Dq ask . 1791The default is 1792.Dq yes 1793if compiled with LDNS and 1794.Dq no 1795otherwise. 1796.Pp 1797See also VERIFYING HOST KEYS in 1798.Xr ssh 1 . 1799.It Cm VersionAddendum 1800Specifies a string to append to the regular version string to identify 1801OS- or site-specific modifications. 1802The default is 1803.Dq FreeBSD-20170302 . 1804The value 1805.Dq none 1806may be used to disable this. 1807.It Cm VisualHostKey 1808If this flag is set to 1809.Dq yes , 1810an ASCII art representation of the remote host key fingerprint is 1811printed in addition to the fingerprint string at login and 1812for unknown host keys. 1813If this flag is set to 1814.Dq no , 1815no fingerprint strings are printed at login and 1816only the fingerprint string will be printed for unknown host keys. 1817The default is 1818.Dq no . 1819.It Cm XAuthLocation 1820Specifies the full pathname of the 1821.Xr xauth 1 1822program. 1823The default is 1824.Pa /usr/local/bin/xauth . 1825.El 1826.Sh PATTERNS 1827A 1828.Em pattern 1829consists of zero or more non-whitespace characters, 1830.Sq * 1831(a wildcard that matches zero or more characters), 1832or 1833.Sq ?\& 1834(a wildcard that matches exactly one character). 1835For example, to specify a set of declarations for any host in the 1836.Dq .co.uk 1837set of domains, 1838the following pattern could be used: 1839.Pp 1840.Dl Host *.co.uk 1841.Pp 1842The following pattern 1843would match any host in the 192.168.0.[0-9] network range: 1844.Pp 1845.Dl Host 192.168.0.? 1846.Pp 1847A 1848.Em pattern-list 1849is a comma-separated list of patterns. 1850Patterns within pattern-lists may be negated 1851by preceding them with an exclamation mark 1852.Pq Sq !\& . 1853For example, 1854to allow a key to be used from anywhere within an organization 1855except from the 1856.Dq dialup 1857pool, 1858the following entry (in authorized_keys) could be used: 1859.Pp 1860.Dl from=\&"!*.dialup.example.com,*.example.com\&" 1861.Sh FILES 1862.Bl -tag -width Ds 1863.It Pa ~/.ssh/config 1864This is the per-user configuration file. 1865The format of this file is described above. 1866This file is used by the SSH client. 1867Because of the potential for abuse, this file must have strict permissions: 1868read/write for the user, and not accessible by others. 1869.It Pa /etc/ssh/ssh_config 1870Systemwide configuration file. 1871This file provides defaults for those 1872values that are not specified in the user's configuration file, and 1873for those users who do not have a configuration file. 1874This file must be world-readable. 1875.El 1876.Sh SEE ALSO 1877.Xr ssh 1 1878.Sh AUTHORS 1879OpenSSH is a derivative of the original and free 1880ssh 1.2.12 release by Tatu Ylonen. 1881Aaron Campbell, Bob Beck, Markus Friedl, Niels Provos, 1882Theo de Raadt and Dug Song 1883removed many bugs, re-added newer features and 1884created OpenSSH. 1885Markus Friedl contributed the support for SSH 1886protocol versions 1.5 and 2.0. 1887