/sys/man/*/*: fix perms (sorry)

[plan9front.git] / sys / man / 1 / ssh

diff --git a/sys/man/1/ssh b/sys/man/1/ssh
index 44d6614d89291598d1d6b6bc4675ba9cb911d523..f2e376e828ddb80b5c64741f0b33b75dec9ed490 100644 (file)
--- a/sys/man/1/ssh
+++ b/sys/man/1/ssh
@@ -11,9 +11,14 @@ ssh - secure shell remote login client
 .B -t
 .I thumbfile
 ] [
+.B -T
+.I tries
+] [
 .B -u
 .I user
 ] [
+.B -h
+] [
 .IR user @] host
 [
 .I cmd
@@ -34,25 +39,40 @@ are forwarded to the local side.
 .PP
 The connection is authenticated and encrypted
 using the SSH2 protocol. The user authenticates
-itself to the host using his RSA keypair or plaintext 
-passwords. To authenticate the host to the user,
-the hosts RSA public key is hashed and compared
-to the entries in
+itself to the host using his RSA key pair (stored
+in factotum) or plaintext  passwords. To authenticate
+the host to the user, the hosts RSA public key is
+hashed and compared to the entries in
 .B $home/lib/sshthumbs
-file. The thumb files location can be changed
-with the
+file (see
+.IR thumbprint (6)).
+The 
+.I thumbfile
+location can be changed with the
 .B -t
 option.
 .PP
-When no
+When
 .I cmd
-is specified then ssh starts a shell on the
-remote side.
+is specified, it is concatenated with the list of quoted
+.I args
+and run on the remote side. No pseudo terminal will be requested.
+A
+.I cmd
+beginning with
+.B #
+is interpreted as a subsystem name such as sftp (see
+.IR sshfs (4)).
 .PP
-If the
+Without
+.IR cmd ,
+a shell is started on the remote side.
+When the
 .B $TERM
-environment variable is set then a pseudo terminal
-will be requested for the shell.
+environment variable is set (such as when started under
+a terminal emulator like
+.IR vt (1)),
+a pseudo terminal will be requested for the shell.
 This can be disabled with the
 .B -R
 option.
@@ -60,9 +80,25 @@ option.
 The
 .B -d
 option enables debug output.
+.SH FILES
+.TF $home/lib/sshthumbs
+.TP
+.B $home/lib/sshthumbs
+the user's thumbfile of known host fingerprints
 .SH SOURCE
 .B /sys/src/cmd/ssh.c
-.SH SEE ALSO
+.SH BUGS
+If
+.I keyboard-interactive
+authentication fails, by default it is retried three times.
+The number of
+.I tries
+can be changed with
+.BR -T .
+Setting it to zero disables keyboard-interactive authentication.
+.SH "SEE ALSO"
 .IR vt (1),
 .IR rsa (8),
-.IR factotum (4)
+.IR thumbprint (6),
+.IR factotum (4),
+.IR sshfs (4)