https://bugzilla.mindrot.org/show_bug.cgi?id=1569
Summary: Hostbased auth fails when using a proxy command
Product: Portable OpenSSH
Version: 5.2p1
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: ssh
AssignedTo: unassigned-bugs@mindrot.org
ReportedBy: imorgan@nas.nasa.gov
Created an attachment (id=1612)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=1612)
Allow get_local_name() to handle a socket or pipe.
If hostbased authentication is enabled and a proxy command is used to
connect to the server, the following warning messages typically
appear:
cannot get sockname for fd
ssh_keysign: no reply
key_sign failed
This is due to the assumption that the file descriptor passed to
get_local_name() corresponds to a socket, which is not the case when a
proxy command is used.
The attached patch modifies get_local_name() sot that it falls back to
using gethostname() if get_socket_address() fails. As a result, some
redundant code in sshconnect2.c is removed. A typo is sshconnect2.c is
also fixed. ('no installed' vs 'not installed')
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
Summary: Hostbased auth fails when using a proxy command
Product: Portable OpenSSH
Version: 5.2p1
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P2
Component: ssh
AssignedTo: unassigned-bugs@mindrot.org
ReportedBy: imorgan@nas.nasa.gov
Created an attachment (id=1612)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=1612)
Allow get_local_name() to handle a socket or pipe.
If hostbased authentication is enabled and a proxy command is used to
connect to the server, the following warning messages typically
appear:
cannot get sockname for fd
ssh_keysign: no reply
key_sign failed
This is due to the assumption that the file descriptor passed to
get_local_name() corresponds to a socket, which is not the case when a
proxy command is used.
The attached patch modifies get_local_name() sot that it falls back to
using gethostname() if get_socket_address() fails. As a result, some
redundant code in sshconnect2.c is removed. A typo is sshconnect2.c is
also fixed. ('no installed' vs 'not installed')
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs