openssh unix dev - Apr 2002 - [Bug 212] Add netgroup support to ssh-keyscan

http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From Michael.Gerdts at alcatel.com  2002-04-11 00:33
-------
This patch also changes the behavior of ssh-keyscan when a hostname does not
resolve.  I have changed the condition from fatal() to error() so that the scan
does not quit when it runs across a bad hostname.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From Michael.Gerdts at alcatel.com  2002-04-11 00:37
-------
Created an attachment (id=69)
Add -n netgroup option to ssh-keyscan and man page




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From markus at openbsd.org  2002-04-11 02:21 -------
hm, why can't you use ypcat/etc to produce a list
and feed it to keyscan's stdin?

this would be more unix like.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From ja2morri at student.math.uwaterloo.ca 
2002-04-11 02:48 -------
Created an attachment (id=70)
netgroups patch against cvs




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From ja2morri at student.math.uwaterloo.ca 
2002-04-11 02:51 -------
  Why not add this feature to openssh.  There is a system call on at least
Solaris, GNU/Linux, and GNU/Hurd for this purpose.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From Michael.Gerdts at alcatel.com  2002-04-11 03:12
-------
ypcat netgroup does not give the output in a nice format.  For example, suppose
I have netgroups like the following:

servers  servers_here servers_there

servers_here  (fred,,) (dino,,)
servers_there (barney,,) (bambam,,)

If I then do "ypmatch servers netgroup", I get back "servers_here
servers_there".  I then have to "ypmatch servers_here netgroup;
ypmatch
servers_there netgroup", then parse the results "(fred,,) (dino,,)
(barney,,)
(bambam,,)" to pull out the server names.  Yuck.

Also, netgroups may not actually exist in NIS.  The NIS LDAP schema (RFC 2037)
and name service switch modules in recent versions of Solaris support netgroups
in LDAP.

If there is resistence to this patch, then perhaps a separate (more unixish)
path to take would be a standalone netgroupcat(1).




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From djm at mindrot.org  2002-04-23 22:54 -------
A standalone netgroupcat would be very useful for other things too - I recommend
that you chose this path.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.