[SSSD] [PATCHES] SSH: Expire hosts in known_hosts

Jan Cholasta jcholast at redhat.com
Thu Sep 20 07:37:58 UTC 2012


Hi,

Dne 19.9.2012 20:01, Stephen Gallagher napsal(a):
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wed 19 Sep 2012 06:09:59 AM EDT, Jan Cholasta wrote:
>> Hi,
>>
>> this patch set changes the way the known_hosts file is updated so that
>> only entries for hosts that were requested recently (in the last 5
>> minutes) are written to the file. There is no need to keep older
>> entries in the file, as host keys are needed only before the
>> connection to the host is established (which usually takes just a few
>> seconds).
>>
>
> I don't think we want to be deleting entries from the sysdb for any
> reason other than that they were deleted on the LDAP server. We'll be
> behaving poorly if we get into a situation where LDAP is unreachable
> but we can still reach the SSH server.

I'm not exactly sure how did you came to the conslusion that anything is 
being deleted from sysdb, but rest assured that it is not.

>
>> The individual patches are:
>>
>> [PATCH 1/3] DB: Add function for deleting values from sysdb_attrs
>>
>> [PATCH 2/3] SSH: Refactor sysdb code
>>
>> [PATCH 3/3] SSH: Expire hosts in known_hosts
>>
>> Honza
>>

Honza

-- 
Jan Cholasta



More information about the sssd-devel mailing list