search for: sss_ssh_knownhostsproxy

...inux Status: NEW Severity: enhancement Priority: P5 Component: ssh Assignee: unassigned-bugs at mindrot.org Reporter: dbelyavs at redhat.com ssh -q to an unknown host should be a silent failure but with ipa/idm installed a program called sss_ssh_knownhostsproxy writes to stderr. To reproduce it, you need to have SSSD client enrolled to a FreeIPA server and run "ssh -q thishostdoesnotexist ls" The FreeIPA project provides a demo server that can be used for this purpose. The client only needs to follow the steps at https://www.freeipa.org/page/D...

...st has specific AddressFamily directive). My suggestion would be to provide a new replacement percent-token to inform the proxy-command about the preferred address family, but if you can think about better solution, I would be glad to hear it. This came up in the following bug [1], which is using sss_ssh_knownhostsproxy (taking care of known hosts validation if connecting to the server managed by IPA), but I believe this can be a real issue in other use cases. https://bugzilla.redhat.com/show_bug.cgi?id=1857104 Thanks, -- Jakub Jelen Senior Software Engineer Security Technologies Red Hat, Inc.

hi, this is not the same as http://bugs.centos.org/view.php?id=6298 I can login with ssh but not with freenx With 6.3 this worked, I just spinned some new servers and now I can no longer use freenx. in /var/log/messages: pr 3 22:05:11 testthuis nxserver[3435]: (nx) Failed login for user=admin from IP=192.168.0.160 Apr 3 22:06:01 testthuis nxserver[3619]: (nx) Failed login for user=admin