35

I found this article on options that can be put before a key in the authorized_keys file. I was wondering though, are there more? Options listed in the article are

  • from="domain"
  • command="commandtorun"
  • no-port-forwarding
  • no-X11-forwarding
  • no-agent-forwarding
  • no-pty

Update It appears that the original article is now inaccessible. Because of that I've now changed the link to point to the archive.org version.

2
  • The link is broken.
    – starfry
    Feb 9, 2017 at 9:49
  • ah, good find @starfry. I've updated the link to point to the archive.org snapshot. Feb 9, 2017 at 15:58

2 Answers 2

49

All options are detailed in the sshd(8) man page; search for AUTHORIZED_KEYS FILE FORMAT.

At the moment, those options are:

  • cert-authority
  • command="command"
  • environment="NAME=value"
  • expiry-time="timespec"
  • from="pattern-list"
  • no-agent-forwarding
  • no-port-forwarding
  • no-pty
  • no-user-rc
  • no-X11-forwarding
  • permitlisten="[host]:port"
  • permitopen="host:port"
  • principals="principals"
  • restrict
  • tunnel="n"
1
  • 2
    ah... that's the man page I was looking for. Thanks May 18, 2010 at 14:22
3

Check 'man sshd' on your local unix-ish box for more info. My osx box has the following:

  • command="command"
  • environment="NAME=value"
  • from="pattern-list"
  • no-agent-forwarding
  • no-port-forwarding
  • no-pty
  • no-user-rc
  • no-X11-forwarding
  • permitopen="host:port"
  • tunnel="n"

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .