Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SSH: sss_ssh_knownhosts must ignore DNS errors #7670

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

SSH: sss_ssh_knownhosts must ignore DNS errors #7670

wants to merge 1 commit into from
+10 −5

Commits on Oct 28, 2024

  1. SSH: sss_ssh_knownhosts must ignore DNS errors 

    When the DNS cannot resolve the provided hostname, sss_ssh_knownhosts
must not fail.

Instead it should try its best to find it. It will now try to find
the host account in IPA using both the fqdn and serverHostName
attributes (the later contains the shortname); and using the name and
nameAlias when looking for the host in the cache.

However, the IP address is not (and must not be) stored in the cache
or IPA entries, so this case will not work if the DNS fails to associate
a hostname to the provided IP address. In such a situtation, not key
will be retrieved and provided to `ssh`.

Resolves: SSSD#7664
    @aplopez
    aplopez committed Oct 28, 2024
    Configuration menu
    Copy the full SHA
    c6b4b7a View commit details
    Browse the repository at this point in the history