[Bug 1650] New: GSSAPI code can only accept connections for the gethostbyname() name.

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Sep 17 01:45:38 EST 2009


https://bugzilla.mindrot.org/show_bug.cgi?id=1650

           Summary: GSSAPI code can only accept connections for the
                    gethostbyname() name.
           Product: Portable OpenSSH
           Version: 5.2p1
          Platform: All
        OS/Version: All
            Status: NEW
          Keywords: needs-release-note, patch
          Severity: enhancement
          Priority: P2
         Component: sshd
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: mengel at fnal.gov


Created an attachment (id=1696)
 --> (https://bugzilla.mindrot.org/attachment.cgi?id=1696)
Patch to allow a GSS_HOSTNAME environment variable to override
gethostname()

If  you are on a host with multiple IP addresses that have different
names, users cannot connect via GSSAPI authentication for the 
alternate hostnames.

The attached patch will allow a GSS_HOSTNAME environment variable to
be set which lets an sshd answer to a different hostname than the
one that gethostname() returns.  One can then run an sshd with
this environment variable set and listening to an appropriate
IP address to serve multiple hostnames on one system.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list