openssh unix dev - Dec 2014 - Dealing with roaming machines

also sprach Nico Kadel-Garcia <nkadel at gmail.com> [2014-12-23 07:50
+0100]:
> If it's not "in the local network", then it shouldn't get
the
> subdomain of the internal network, and you've got a DNS
"views" or
> DHCP configuration issue.
While the machine is not at the office, other machines can resolve
fishbowl.office to a valid IP? that's the same as resolving the
hostname of a machine that's turned off.
> I'm now assuming that you now have fully qualified hostnames that
> differ in each environment?
fishbowl.office  ? 192.168.17.33
fishbowl.home    ? 192.168.14.33
fishbowl.lab     ? 192.168.15.33

The three /24 networks are connected via a VPN. All three names
resolve to the appropriate IP, and obviously when at the office,
a request for "fishbowl" will yield 192.168.17.33 while it would
yield 192.168.14.33 at home (due to DNS search).

I'd kinda like OpenSSH to connect to all three IPs at once, since
only one will ever be answered at any one time. Or it should try
them in quick succession.

I realise that this is not really an OpenSSH question anymore and
I am sorry about that. The dynamic DNS solution is probably the
cleanest solution anyway. But the topic seems to have struck some
interest?

-- 
@martinkrafft | http://madduck.net/ | http://two.sentenc.es/
 
"the sick do not ask
 if the hand that smoothes their pillow is pure,
 nor the dying care
 if the lips that touch their brow have known the kiss of sin."
                                                        -- oscar wilde
 
spamtraps: madduck.bogus at madduck.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: digital_signature_gpg.asc
Type: application/pgp-signature
Size: 1107 bytes
Desc: Digital signature (see
http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
URL:
<http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20141223/bbbddaee/attachment-0001.bin>

On Tue, Dec 23, 2014 at 8:51 AM, martin f krafft <madduck at madduck.net>
wrote:
[...]
> I'd kinda like OpenSSH to connect to all three IPs at once, since
> only one will ever be answered at any one time.

You could do that with a ProxyCommand: have it connect() to all addresses
returned by DNS, use the first one to return and close the others.  Writing
such a tool would be fair simple, and I would be surprised if something
like that doesn't already exist.

> Or it should try them in quick succession.
>
Try "ConnectTimeout 1s" or similar in your config for that host.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

also sprach Darren Tucker <dtucker at zip.com.au> [2014-12-25 17:19
+0100]:
> You could do that with a ProxyCommand: have it connect() to all
> addresses returned by DNS, use the first one to return and close
> the others.  Writing such a tool would be fair simple, and I would
> be surprised if something like that doesn't already exist.
This is precisely what I am currently working on and I will share my
results once I finish. If only all this Christmas stuff didn't keep
one from getting work done! ;)

-- 
@martinkrafft | http://madduck.net/ | http://two.sentenc.es/
 
"it is impossible to foresee the consequences of being clever."
                                                -- cristopher strachey
 
spamtraps: madduck.bogus at madduck.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: digital_signature_gpg.asc
Type: application/pgp-signature
Size: 1103 bytes
Desc: Digital signature (see
http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
URL:
<http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20141225/a8dcf3f9/attachment.bin>