From 6d97caadfd116e16415952a3fb2814062690be19 Mon Sep 17 00:00:00 2001 From: Merlijn Wajer Date: Sat, 27 May 2017 21:31:13 +0200 Subject: [PATCH] Updated README for new authkeys format --- README.rst | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/README.rst b/README.rst index 63c6b95..48975cd 100644 --- a/README.rst +++ b/README.rst @@ -4,8 +4,8 @@ Motivation sshd implementation in Go, for the sole purpose of restricting the ports that clients can request using direct-tcpip and tcpip-forward / forwarded-tcpip. -OpenSSH refuses to merge patches to support this, but there is a fork of OpenSSH -with patches that achieve something similar to this. [1] +OpenSSH so far refuses to merge patches to support this, but there is a fork of +OpenSSH with patches that achieve something similar to this. [1] [1] https://github.com/antonyantony/openssh @@ -13,10 +13,14 @@ with patches that achieve something similar to this. [1] authorized_keys format ====================== -Same as OpenSSH authorized_keys format. +Compatible with OpenSSH authorized_keys format, not in specific options. + The options field contains the ports that are allowed to be forwarded, colon separated:: - ports=3333:4444 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHPWEWu85yECrbmtL38wlFua3tBSqxTekCX/aU+dku+w COMMENTHERE + remoteports=3333:4444 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHPWEWu85yECrbmtL38wlFua3tBSqxTekCX/aU+dku+w COMMENTHERE + +Adding allowed hosts along with these ports is something that needs to be done +in the future. Running as non-root user ========================