summaryrefslogtreecommitdiff
path: root/docs/configuration/system
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2025-05-29 20:17:01 +0200
committerGitHub <noreply@github.com>2025-05-29 20:17:01 +0200
commitbfa8a806ee97eced6fc8d8c4c2a74a5c2e5e4eaf (patch)
tree04329a2e641d39c3efe9b7a88c053d295bbe83b5 /docs/configuration/system
parent6ef2db0fc061cb653db05520b08ffb502dedecd1 (diff)
parentf5ee81a3bbf1c5a9e5c2b8f512d12f040fcaa3cd (diff)
downloadvyos-documentation-bfa8a806ee97eced6fc8d8c4c2a74a5c2e5e4eaf.tar.gz
vyos-documentation-bfa8a806ee97eced6fc8d8c4c2a74a5c2e5e4eaf.zip
Merge pull request #1641 from vyos/ssh-ca
ssh: T6013: add example how to use a CA for system login
Diffstat (limited to 'docs/configuration/system')
-rw-r--r--docs/configuration/system/login.rst7
1 files changed, 7 insertions, 0 deletions
diff --git a/docs/configuration/system/login.rst b/docs/configuration/system/login.rst
index 3a7481eb..1c4e041d 100644
--- a/docs/configuration/system/login.rst
+++ b/docs/configuration/system/login.rst
@@ -34,6 +34,13 @@ Local
Setup encrypted password for given username. This is useful for
transferring a hashed password from system to system.
+.. cfgcmd:: set system login user <name> authentication principal <principal>
+
+ When using SSH certificate based authentication, define which principals are
+ alled to use this account.
+
+ If unset, the principal will be set to the login name of the user bz default.
+
.. cfgcmd:: set system login user <name> disable
Disable (lock) account. User will not be able to log in.