# HG changeset patch # User Matt Johnston # Date 1225893194 0 # Node ID 4e251543b941af63ad5449187fa497d38bae4bee # Parent d4bbc003900845abbe98b5ebb39c0422d96f45b2 LICENSE - Update copyright to 2008 cli-runopts.c - mention that -v is for DEBUG_TRACE, add multihop syntax dbclient.1 - document some new features diff -r d4bbc0039008 -r 4e251543b941 LICENSE --- a/LICENSE Wed Nov 05 13:30:23 2008 +0000 +++ b/LICENSE Wed Nov 05 13:53:14 2008 +0000 @@ -8,7 +8,7 @@ Portions of the client-mode work are (c) 2004 Mihnea Stoenescu, under the same license: -Copyright (c) 2002-2006 Matt Johnston +Copyright (c) 2002-2008 Matt Johnston Portions copyright (c) 2004 Mihnea Stoenescu All rights reserved. diff -r d4bbc0039008 -r 4e251543b941 cli-runopts.c --- a/cli-runopts.c Wed Nov 05 13:30:23 2008 +0000 +++ b/cli-runopts.c Wed Nov 05 13:53:14 2008 +0000 @@ -49,7 +49,11 @@ static void printhelp() { fprintf(stderr, "Dropbear client v%s\n" +#ifdef ENABLE_CLI_MULTIHOP + "Usage: %s [options] [user@]host[/port][,[user@]host/port],...] [command]\n" +#else "Usage: %s [options] [user@]host[/port] [command]\n" +#endif "Options are:\n" "-p \n" "-l \n" @@ -72,13 +76,13 @@ "-W (default %d, larger may be faster, max 1MB)\n" "-K (0 is never, default %d)\n" #ifdef ENABLE_CLI_NETCAT - "-B Netcat-alike bouncing\n" + "-B Netcat-alike forwarding\n" #endif #ifdef ENABLE_CLI_PROXYCMD - "-J Use program rather than tcp connection\n" + "-J Use program pipe rather than TCP connection\n" #endif #ifdef DEBUG_TRACE - "-v verbose\n" + "-v verbose (compiled with DEBUG_TRACE)\n" #endif ,DROPBEAR_VERSION, cli_opts.progname, DEFAULT_RECV_WINDOW, DEFAULT_KEEPALIVE); diff -r d4bbc0039008 -r 4e251543b941 dbclient.1 --- a/dbclient.1 Wed Nov 05 13:30:23 2008 +0000 +++ b/dbclient.1 Wed Nov 05 13:53:14 2008 +0000 @@ -11,6 +11,12 @@ .IR user ] .I host .RI [ command ] + +.B dbclient +[ +.I args ] +.I [user1]@host1[/port1],[user2]@host2[/port2],... + .SH DESCRIPTION .B dbclient is a SSH 2 client designed to be small enough to be used in small memory @@ -87,22 +93,40 @@ a certain period of inactivity. The trade-off is that a session may be closed if there is a temporary lapse of network connectivity. A setting if 0 disables keepalives. +.B \-J \fIproxy_command +Use the standard input/output of the program \fIproxy_command\fR rather than using +a normal TCP connection. A hostname should be still be provided, as this is used for +comparing saved hostkeys. +.B \B \fIendhost:endport +"Netcat-alike" mode, where Dropbear will connect to the given host, then create a +forwarded connection to \fIendhost\fR. This will then be presented as dbclient's +standard input/output. + +Dropbear will also allow multiple "hops" to be specified, separated by commas. In +this case a connection will be made to the first host, then a TCP forwarded +connection will be made through that to the second host, and so on. Hosts other than +the final destination will not see anything other than the encrypted SSH stream. +This syntax can also be used with scp or rsync (specifying dbclient as the +ssh/rsh command). A port for a host can be specified with a slash (eg matt@martello/44 ). + .SH ENVIRONMENT .TP +.B DROPBEAR_PASSWORD +A password to use for remote authentication can be specified in the environment +variable DROPBEAR_PASSWORD. Care should be taken that the password is not +exposed to other users on a multi-user system, or stored in accessible files. +.TP .B SSH_ASKPASS dbclient can use an external program to request a password from a user. SSH_ASKPASS should be set to the path of a program that will return a password on standard output. This program will only be used if either DISPLAY is set and standard input is not a TTY, or the environment variable SSH_ASKPASS_ALWAYS is set. -.TP -.B DROPBEAR_PASSWORD -A password to use for remote authentication can be specified in the environment -variable DROPBEAR_PASSWORD. Care should be taken that the password is not -exposed to other users on a multi-user system, or stored in accessible files. .SH AUTHOR Matt Johnston (matt@ucc.asn.au). .br +Mihnea Stoenescu wrote initial Dropbear client support +.br Gerrit Pape (pape@smarden.org) wrote this manual page. .SH SEE ALSO dropbear(8), dropbearkey(8)