33

I found this article on options that can be put before a key in the authorized_keys file. I was wondering though, are there more? Options listed in the article are

  • from="domain"
  • command="commandtorun"
  • no-port-forwarding
  • no-X11-forwarding
  • no-agent-forwarding
  • no-pty

Update It appears that the original article is now inaccessible. Because of that I've now changed the link to point to the archive.org version.

2
  • The link is broken.
    – starfry
    Feb 9, 2017 at 9:49
  • ah, good find @starfry. I've updated the link to point to the archive.org snapshot. Feb 9, 2017 at 15:58

2 Answers 2

46

All options are detailed in the sshd(8) man page; search for AUTHORIZED_KEYS FILE FORMAT.

At the moment, those options are:

  • cert-authority
  • command="command"
  • environment="NAME=value"
  • expiry-time="timespec"
  • from="pattern-list"
  • no-agent-forwarding
  • no-port-forwarding
  • no-pty
  • no-user-rc
  • no-X11-forwarding
  • permitlisten="[host]:port"
  • permitopen="host:port"
  • principals="principals"
  • restrict
  • tunnel="n"
1
  • 2
    ah... that's the man page I was looking for. Thanks May 18, 2010 at 14:22
3

Check 'man sshd' on your local unix-ish box for more info. My osx box has the following:

  • command="command"
  • environment="NAME=value"
  • from="pattern-list"
  • no-agent-forwarding
  • no-port-forwarding
  • no-pty
  • no-user-rc
  • no-X11-forwarding
  • permitopen="host:port"
  • tunnel="n"

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.