What options can be put into a SSH authorized_keys file?

I found this article on options that can be put before a key in the authorized_keys file. I was wondering though, are there more? Options listed in the article are

  • from="domain"
  • command="commandtorun"
  • no-port-forwarding
  • no-X11-forwarding
  • no-agent-forwarding
  • no-pty

Update It appears that the original article is now inaccessible. Because of that I've now changed the link to point to the archive.org version.


All options are detailed in the sshd(8) man page; search for AUTHORIZED_KEYS FILE FORMAT.

At the moment, those options are:

  • cert-authority
  • command="command"
  • environment="NAME=value"
  • expiry-time="timespec"
  • from="pattern-list"
  • no-agent-forwarding
  • no-port-forwarding
  • no-pty
  • no-user-rc
  • no-X11-forwarding
  • permitlisten="[host]:port"
  • permitopen="host:port"
  • principals="principals"
  • restrict
  • tunnel="n"

Check 'man sshd' on your local unix-ish box for more info. My osx box has the following:

  • command="command"
  • environment="NAME=value"
  • from="pattern-list"
  • no-agent-forwarding
  • no-port-forwarding
  • no-pty
  • no-user-rc
  • no-X11-forwarding
  • permitopen="host:port"
  • tunnel="n"