[Bug 616] proxycommand breaks hostbased authentication.

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu May 17 20:25:29 EST 2007


http://bugzilla.mindrot.org/show_bug.cgi?id=616





--- Comment #3 from Simon Wilkinson <simon at sxw.org.uk>  2007-05-17 20:25:25 ---
I'm not particularly familiar with the ProxyCommand code, or with SSH1
Hostbased auth. 

The proposed fix does appear to preserve semantics (if the incoming
connection is a socket, it must be from the local machine), but I'm not
sure whether it is correct to be permitting hostbased auth in those
circumstances.


-- 
Configure bugmail: http://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the openssh-bugs mailing list