1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
|
.\" t
.\" Process this file with
.\" groff -man -Tascii sshproxy.ini.5
.\"
.TH SSHPROXY.INI 5 "DECEMBER 2007" Linux "User Manuals"
.SH NAME
sshproxy.ini \- sshproxy configuration file
.SH FORMAT
The configuration file \fIsshproxy.ini\fR is a simple INI file containing
several sections.
.SH "SECTION [sshproxy]"
This is the main section of the configuration file.
.B bindip
.RS
Bind sshproxy to the given IP address. Default (when empty) is to bind to all
adresses (0.0.0.0).
.RE
.B port
.RS
Bind to port. Default is 2242.
.RE
.B plugin_dir
.RS
Where the plugins are located. Defaults to \fI/usr/lib/sshproxy\fR.
.RE
.B logger_conf
.RS
Point to the logger.conf file. Default is
.RS
\fI/usr/share/sshproxy/logger.conf\fR.
.RE
.RE
.B log_dir
.RS
This directory will contain debug logs from paramiko and sshproxy. Defaults to
\fI@log\fR.
.RE
.B pkey_id
.RS
The id string of the \fIsshproxyd\fR(8) public key, used when a client connects
with the option --get-pkey. Defaults to \fIsshproxy@penguin.fr\fR.
.RE
.B auto_add_key
.RS
If \fIno\fR, the client's public key will not be added in the database
(equivalent to the authorized_keys file for sshd). If \fIyes\fR, the client's
public key will always be added, no matter how many keys are already in the
database. You can give a number to limit the number of keys automatically added.
Defaults to \fIno\fR.
.RE
.B client_db
.RS
The type of backend to use to handle the clients database. This is the name of
the chosen plugin.
.RE
.B acl_db
.RS
The type of backend to use to handle the ACL database. This is the name of
the chosen plugin.
.RE
.B site_db
.RS
The type of backend to use to handle the sites database. This is the name of
the chosen plugin.
.RE
.B plugin_list
.RS
Space separated list of plugins to load at startup. Plugins are located by
default in \fI/usr/share/sshproxy\fR. You \fBMUST\fR give at least one backend
plugin (*_db).
.RE
.B cipher_type
.RS
The cipher type to use, one of \fIplain\fR, \fIbase64\fR or \fIblowfish\fR
(default).
.RE
.SH "SECTION [blowfish]"
This section configures the blowfish cipher engine.
.B secret
.RS
The secret passphrase for the blowfish cipher engine. It \fBMUST\fR be at least
10 characters long.
.RE
.SH "SECTIONS [client_db.ini] [acl_db.ini] [site_db.ini]"
These sections configure the three databases of the \fIini_db\fR backend.
.B file \fR(applies to client_db, acl_db)
.RS
The path to the database file. Defaults are resp. \fI@client_db\fR and
\fI@acl_db\fR.
.RE
.B db_path \fR(applies to site_db)
.RS
The path to the database directory. Defaults to \fI@site_db\fR.
.RE
.SH "SECTIONS [client_db.mysql] [acl_db.mysql] [site_db.mysql]"
These sections configure the three databases of the \fImysql_db\fR backend.
.B host
.RS
The IP address or resolvable name of the database host. Defaults to
\fIlocalhost\fR.
.RE
.B port
.RS
The database host port. Defaults to \fI3306\fR.
.RE
.B db
.RS
The database name. Defaults to \fIsshproxy\fR.
.RE
.B user
.RS
The database user. Defaults to \fIsshproxy\fR.
.RE
.B password
.RS
The database user password. Defaults to \fIsshproxypw\fR, but you should change
it.
.RE
.SH EXAMPLES
Here is a complete configuration file which tells \fIsshproxyd\fR(8) to use the
\fIini_db\fR plugin for the ACL database, and the \fImysql_db\fR plugin for
client and site databases:
.RS
.sp
.nf
.ne 19
[sshproxy]
bindip =
port = 2242
plugin_dir = /usr/lib/sshproxy
logger_conf = /usr/share/sshproxy/logger.conf
log_dir = @log
pkey_id = sshproxy@penguin.fr
auto_add_key = no
client_db = mysql_db
acl_db = ini_db
site_db = mysql_db
plugin_list = ini_db mysql_db
cipher_type = blowfish
[blowfish]
secret = This should be a valid passphrase
[acl_db.ini]
file = @acl.db
[client_db.mysql]
db = sshproxy
host = localhost
user = sshproxy
password = sshproxypw
port = 3306
[site_db.mysql]
db = sshproxy
host = localhost
user = sshproxy
password = sshproxypw
port = 3306
.SH FILES
.I ~/.sshproxy/sshproxy.ini
.RS
The main configuration file. See \fIsshproxy.ini\fR for further details.
.RE
.I ~/.sshproxy/id_dsa
.RS
The private hostkey file. This hostkey is automatically generated by
\fIsshproxyd\fR(8) at startup if it doesn't exist.
.RE
.SH AUTHOR
David Guerizec <david@guerizec.net>
.SH "SEE ALSO"
.BR sshproxy-setup (1),
.BR sshproxyd (8),
.BR pssh (1),
.BR pscp (1),
The sshproxy home page: <\fIhttp://sshproxy-project.org/\fR>
The sshproxy online documentation:
.RS
<\fIhttp://sshproxy-project.org/documentation/\fR>
|
