.! $Id: fish.rnh,v 1.14 1999/06/25 05:33:41 levitte Exp $ .set paragraph 0 .autoparagraph .nonumber .left margin 0 1 FISH .left margin 2 FISH is an SSH client for VMS. It currently supports SSH protocol 1.5. Format: .left margin 6 FISH [/qualifiers] (host|user@host) [commands ...] .left margin 0 2 Defining__FISH .left margin 2 To define FISH, enter the following command: .left margin 6 .! .! Tailor the following to your site .! $ FISH == "$somedisk:[somedir]FISH" .left margin 2 where "somedisk:[somedir]" above is the directory path where the FISH image resides. You can also place the above command in your login command procedure. .left margin 0 2 Parameters .left margin 6 .indent -4 host or user@host The first form will use host as host name to connect to, with the users user name as remote user name (unless it's given with /USERNAME). The second form will use user as user name and host as host name. If user@host and /USERNAME are both given, FISH will exit with an error status. .indent -4 .blank 1 commands... The rest of the command line will be treated as a command to be executed remotely. .left margin 0 2 Qualifiers .left margin 0 /AUTHENTICATION_METHODS .left margin 2 /AUTHENTICATION_METHODS=(methods) Authentication methods to try. The following are available: .left margin 6 All, RHOSTS, RSA, PASSWORD, TIS .blank 1 .left margin 0 /CIPHERS .left margin 2 /CIPHERS=(ciphers) The following ciphers are available: .left margin 6 All, IDEA, 3DES, DES, RC4, Blowfish .blank 1 .left margin 0 /COMPRESS .left margin 2 /COMPRESS=number This makes FISH compress the packets. The compression factor (number) can be 1 to 9, corresponding to the compression factor used by GNU zip. .blank 1 .left margin 0 /HELP .left margin 2 /HELP Outputs a short screen of help, then exits. .blank 1 .left margin 0 /IDENTITY_FILE .left margin 2 /IDENTITY_FILE=file Uses 'file' as identity file, containing an RSA key. The default is [.SSH]IDENTITY.DAT from your login directory . .blank 1 .left margin 0 /INPUT .left margin 2 /INPUT=file Uses 'file' for input. The default is SYS$INPUT:. .blank 1 .left margin 0 /KEY .left margin 2 /KEY (/GENERATE=keys|/CHANGE=keys) Generates a new RSA key pair for authentication, or changes an already existing one (the latter is not yet implemented). The qualifiers keys is a comma-separated list of keywords to change some parameters. .blank 1 .left margin 0 /MODE .left margin 2 /MODE=(INPUT=TEXT|BINARY,OUTPUT=TEXT|BINARY) Select text or binary mode for input file or output file. .blank 1 .left margin 0 /OUTPUT .left margin 2 /OUTPUT=file Uses 'file' for output. The default is SYS$OUTPUT:. .blank 1 .left margin 0 /PROXY .left margin 2 /PROXY=(HOST=host,PORT=port) Enables the use of a http proxy, using the CONNECT http command. The host `host' on port `port' is used as proxy. .blank 1 .left margin 0 /PASSWORD .left margin 2 /PASSWORD=password Uses 'password' as your password to the remote host. .blank 1 .left margin 0 /USERNAME .left margin 2 /USERNAME=username Uses 'username' as your username on the remote host. .blank 1 .left margin 0 /PORT .left margin 2 /PORT=port Uses 'port' as the remote port to connect to. Default: 22 .blank 1 .left margin 0 /TTY .left margin 2 /TTY Forces the creation of a pty on the remote server. This is an advantage to use this with /COMMAND if the remote server is a Unix machine. .blank 1 .left margin 0 /VERBOSE .left margin 2 /VERBOSE[=(FULL, PASSWORD)] Outputs debugging info. The normal mode is to show just one line for each debugging record, and replace all passwords with "". The values will change that. .blank 1 .left margin 0 /VERSION .left margin 2 /VERSION Outputs version info, then exits. .left margin 0 2 Keywords__for__/KEY .left margin 2 The following keys with values can be given to the key management part of FISH: .left margin 6 .blank 1 .indent -4 BITS=n The amount of bits in the RSA key. Default: 1024 .blank 1 .indent -4 CIPHER=(DES|3DES|IDEA|RC4|BLOWFISH) The cipher type to be used to encrypt the key. You will be prompted a pass phrase to be used as encryption key. This is the same pass phrase that is used when you do a remote connection with RSA authentication. Default: 3DES .blank 1 .indent -4 IDENTITY_FILE=file The file in which the key pair is stored. The public part of the pair is also saved in ASCII in a file that is the same name as the identity file, with "-PUB" added at the end. Default: [.SSH]IDENTITY.DAT from your home directory. .blank 1 .indent -4 COMMENT=comment The name of the key. Used to give you a pass phrase prompt. Default: {user}@{host}, where {user} is your user name, and {host} is the FQDN of your host. .blank 1 .indent -4 PASSWORD Tells the key manager that a password change is requested. This is only valid with /CHANGE. .left margin 0 2 Examples .left margin 6 .indent -4 1. Simple remote login: .left margin 8 .blank 1 .literal $ FISH foo.bar.com /USERNAME=levitte .end literal .blank 1 .left margin 6 .indent -4 2. Generate the identity file IDENTITY.DAT in the home subdirectory [.SSH] with fewer RSA bits than the default (1024): .left margin 8 .blank 1 .literal $ FISH /KEY /GENERATE=BITS=512 .end literal .blank 1 .left margin 6 .indent -4 3. Generate the identity file FOO.DAT in the current directory, with the private part encrypted using Blowfish instead of the default cipher (3DES): .left margin 8 .blank 1 .literal $ FISH /KEY /GENERATE=(IDENTITY_FILE=FOO.DAT,CIPHER=BLOWFISH) .end literal .blank 1 .left margin 6 .indent -4 4. Login using FOO.DAT as identity file: .left margin 8 .blank 1 .literal $ FISH foo.bar.com /USERNAME=levitte /IDENTITY_FILE=FOO.DAT .end literal .left margin 0 2 Authors .left margin 2 FISH was originally crafted together by Christer Weinigel , and has been enhanced and maintained since by Richard Levitte . Some information is also available on: .blank .center http://www.free.lp.se/fish/ .left margin 0 2 Thanks .left margin 2 to all those who have helped make this package better. The following persons have given us great feedback: .list "-" .list element;David#L.#Jones _ who made the OSU SSH server that was a very good testbed, and also for coming with some good suggestions. .list element;Wolfgang#J.#Moeller _ for patches to solve performance and other problems. .list element;David#Mathog _ and Jacek#W.#Tobiasz _ for a bunch of good suggestions. .list element;Edward#J.#Groth _ for very good bug reports. .list element;Jérôme#Lauret _ for the help and inspiration in relation to VMS messages, user interface, GNU C and a bunch of small to serious bugs. .end list If you feel left out, please send the authors a message.