[SSSD] [PATCHES] SSH: Expire hosts in known_hosts

Stephen Gallagher sgallagh at redhat.com
Wed Sep 19 18:01:46 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed 19 Sep 2012 06:09:59 AM EDT, Jan Cholasta wrote:
> Hi,
>
> this patch set changes the way the known_hosts file is updated so that
> only entries for hosts that were requested recently (in the last 5
> minutes) are written to the file. There is no need to keep older
> entries in the file, as host keys are needed only before the
> connection to the host is established (which usually takes just a few
> seconds).
>

I don't think we want to be deleting entries from the sysdb for any
reason other than that they were deleted on the LDAP server. We'll be
behaving poorly if we get into a situation where LDAP is unreachable
but we can still reach the SSH server.

> The individual patches are:
>
> [PATCH 1/3] DB: Add function for deleting values from sysdb_attrs
>
> [PATCH 2/3] SSH: Refactor sysdb code
>
> [PATCH 3/3] SSH: Expire hosts in known_hosts
>
> Honza
>
>
>
> N�n�r����)em�h�yhiם�w^��

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlBaCIoACgkQeiVVYja6o6O7pACdHg5D0agvAlZR3gn361SgjZKO
AgIAn34DqvGzj54WEyi7SK3raF1Q9UcN
=iWvj
-----END PGP SIGNATURE-----




More information about the sssd-devel mailing list