[Bug 1169] Enhancement request to support subnet configurations for Host configuration directive

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Apr 9 15:02:33 EST 2010


https://bugzilla.mindrot.org/show_bug.cgi?id=1169

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> 2010-04-09 15:02:32 EST ---
I'd like to see this but it is tricky.

The problem with allowing IP address matching in ssh_config is that we
don't know the address that we will be connecting to when we parse the
file unless the user has happened to directly specify an IP address
instead of a domain name. We need to pass through the config file prior
to address resolution because a Hostname directive may remap the actual
target that we are connecting to.

A solution to this is to make a second pass through the config file
once we have resolved the address. Unfortunately, this is complex - a
hostname might resolve to multiple addresses, each of which might set
different, even contradictory, options. Worse, we can't just save and
restore client options easily since there is a fair bit of linked state
so we would need to solve this first.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list