diff options
author | Timo Weingärtner <timo@tiwe.de> | 2013-10-26 01:34:57 +0200 |
---|---|---|
committer | Timo Weingärtner <timo@tiwe.de> | 2013-10-26 01:34:57 +0200 |
commit | 516e7ee8307721afe519fe4b77ba015058409ae2 (patch) | |
tree | 07c7cf7502f4daf70a784ee2c23296a21ad50b66 /README.md | |
parent | 6f131d437f00e41a83fd158e03d2648ea2131d50 (diff) | |
parent | bd2154e05c0ab15d8e25f997fb4e6ec61f7a4c1f (diff) | |
download | ssh-agent-filter-516e7ee8307721afe519fe4b77ba015058409ae2.tar.gz |
Merge tag '0.3' into debian
0.3
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 19 |
1 files changed, 13 insertions, 6 deletions
@@ -13,20 +13,27 @@ our solution ------------ 1. create one key(pair) for each realm you connect to -2. load keys into your ssh-agent as usual -3. use ssh-agent-filter to allow only the key(s) you need +2. load keys into your `ssh-agent` as usual +3. use `ssh-agent-filter` to allow only the key(s) you need -afssh (agent filtered ssh) can wrap ssh-agent-filter and ssh for you: +`afssh` (agent filtered ssh) can wrap `ssh-agent-filter` and `ssh` for you, forwarding only the key with the comment `id_example`: - $ afssh -c id_example -- example.com + $ afssh --comment id_example -- example.com -starts an `ssh-agent-filter -c id_example`, runs `ssh -A example.com` and kills the ssh-agent-filter afterwards. +starts an `ssh-agent-filter --comment id_example`, runs `ssh -A example.com` and kills the `ssh-agent-filter` afterwards. If you leave out the options before the `--`: $ afssh -- example.com -it will ask you via whiptail or dialog which keys you want to have forwarded. +it will ask you via `whiptail` or `dialog` which keys you want to have forwarded. + + +confirmation +------------ + +You can use the `--*-confirmed` options (e.g.`--comment-confirmed`) to add keys for which you want to be asked on each use through the filter. +The confirmation is done in the same way as when you `ssh-add -c` a key to your `ssh-agent`, but the question will contain some additional information extracted from the sign request. how it works |