CanonicalHostname and ssh connections through a jumphost

Brian Candler b.candler at pobox.com
Wed May 20 17:33:07 AEST 2020


On 20/05/2020 08:11, Warlich, Christof wrote:
> Instead of just trying to resolve one in the list of potential fully qualified hostnames locally
> (which cannot work as the host is only known in some remote subnet accessible through
> the ProxyJump command), the command  defined in ProxyJump should be used to resolve
> the fully qualified hostname in that remote subnet.

That sounds like a chicken-and-egg situation. You have:

host *.example.com
   ProxyJump blah

but you don't know that you should use this entry until you know that 
the unqualified name can be qualified to *.example.com.

ISTM that if you want the ProxyJump host to work that way, you'd have to 
try every ProxyJump entry in the file, and ask them in turn to resolve 
the name until you find one that works.



More information about the openssh-unix-dev mailing list