openssh-2.9p2, auth2.c

Hans Werner Strube strube at physik3.gwdg.de
Sat Sep 29 01:50:01 EST 2001


> On Fri, Sep 28, 2001 at 10:46:13AM +0200, Hans Werner Strube wrote:
> > Even with option "HostbasedUsesNameFromPacketOnly yes", the trailing
> > dot in chost should be stripped before auth_rhosts2() is called from
> > hostbased_key_allowed().
> 
> why?
> 

Because otherwise the host names in /etc/hosts.equiv, .shosts etc. would
also have to be terminated by a dot to match.



More information about the openssh-unix-dev mailing list