Hi,
Dne 19.9.2012 20:01, Stephen Gallagher napsal(a):
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed 19 Sep 2012 06:09:59 AM EDT, Jan Cholasta wrote:
> Hi,
>
> this patch set changes the way the known_hosts file is updated so that
> only entries for hosts that were requested recently (in the last 5
> minutes) are written to the file. There is no need to keep older
> entries in the file, as host keys are needed only before the
> connection to the host is established (which usually takes just a few
> seconds).
>
I don't think we want to be deleting entries from the sysdb for any
reason other than that they were deleted on the LDAP server. We'll be
behaving poorly if we get into a situation where LDAP is unreachable
but we can still reach the SSH server.
I'm not exactly sure how did you came to the conslusion that anything is
being deleted from sysdb, but rest assured that it is not.
> The individual patches are:
>
> [PATCH 1/3] DB: Add function for deleting values from sysdb_attrs
>
> [PATCH 2/3] SSH: Refactor sysdb code
>
> [PATCH 3/3] SSH: Expire hosts in known_hosts
>
> Honza
>
Honza
--
Jan Cholasta