|
|
|
|
@ -46,10 +46,10 @@ Usage: --osh SCRIPT_NAME --account ACCOUNT --host HOST --user USER --port PORT [
|
|
|
|
|
must not specify --user in that case. However, for this protocol to be usable under a given
|
|
|
|
|
remote user, access to the USER@HOST:PORT tuple must also be allowed.
|
|
|
|
|
PROTO must be one of:
|
|
|
|
|
scpup allow SCP upload, you--bastion-->server
|
|
|
|
|
scpdown allow SCP download, you<--bastion--server
|
|
|
|
|
sftp allow usage of the SFTP subsystem, through the bastion
|
|
|
|
|
rsync allow usage of rsync, through the bastion
|
|
|
|
|
scpupload allow SCP upload, you--bastion-->server
|
|
|
|
|
scpdownload allow SCP download, you<--bastion--server
|
|
|
|
|
sftp allow usage of the SFTP subsystem, through the bastion
|
|
|
|
|
rsync allow usage of rsync, through the bastion
|
|
|
|
|
--force-key FINGERPRINT Only use the key with the specified fingerprint to connect to the server (cf accountListEgressKeys)
|
|
|
|
|
--force-password HASH Only use the password with the specified hash to connect to the server (cf accountListPasswords)
|
|
|
|
|
--ttl SECONDS|DURATION Specify a number of seconds (or a duration string, such as "1d7h8m") after which the access will automatically expire
|
|
|
|
|
|