[Bug 1650] New: GSSAPI code can only accept connections for the gethostbyname() name.
bugzilla-daemon at bugzilla.mindrot.org
bugzilla-daemon at bugzilla.mindrot.org
Thu Sep 17 01:45:38 EST 2009
https://bugzilla.mindrot.org/show_bug.cgi?id=1650
Summary: GSSAPI code can only accept connections for the
gethostbyname() name.
Product: Portable OpenSSH
Version: 5.2p1
Platform: All
OS/Version: All
Status: NEW
Keywords: needs-release-note, patch
Severity: enhancement
Priority: P2
Component: sshd
AssignedTo: unassigned-bugs at mindrot.org
ReportedBy: mengel at fnal.gov
Created an attachment (id=1696)
--> (https://bugzilla.mindrot.org/attachment.cgi?id=1696)
Patch to allow a GSS_HOSTNAME environment variable to override
gethostname()
If you are on a host with multiple IP addresses that have different
names, users cannot connect via GSSAPI authentication for the
alternate hostnames.
The attached patch will allow a GSS_HOSTNAME environment variable to
be set which lets an sshd answer to a different hostname than the
one that gethostname() returns. One can then run an sshd with
this environment variable set and listening to an appropriate
IP address to serve multiple hostnames on one system.
--
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
More information about the openssh-bugs
mailing list