Unix-domain port forwarding with openssh

From: Jim Nance (jlnance@intrex.net)
Date: 12/24/02

  • Next message: Cary Wells: "SSHD login problem" 
    From: Jim Nance <jlnance@intrex.net>
Date: Tue, 24 Dec 2002 03:16:11 GMT

    Hello All,
        I would like to be able to use openssh to forward Unix domain
    socket connections.
        I am writing a distributed application and I want to use ssh to
    take care of machine to machine communications. This way I can use
    its encryption and authentication features rather than try and write
    them myself. I can fairly easily make this work using ssh'es port
    forwarding features. However, if I use TCP sockets, I have to worry
    about other users on the machine connecting to the forwared ports.
    If I was to use Unix domain sockets, I would be able to use file
    system permissions to keep unwanted people from accessing my sockets.
        This seems like a very logical use of forwared ports and it seems
    like it would be an easy feature to add to ssh. So I assumed that
    it had either already been done or that it was not as good an idea
    as it seemed. I looked through the documentation on the openssh
    web site and I dont see anything about forwarding Unix domain sockets.
    So perhaps its not as good an idea as I thought? Any thoughts
    about this?

    Thanks,

    Jim

    Relevant Pages

    • Re: unix domain socket security and PID retrieval
      ... Been starting to look into writing some stuff that uses unix domain ... sockets, but I've been running into the problem of figuring out what ... the calling PID is on the other end. ...
      (freebsd-questions)
    • Re: Sockets question
      ... Hang on, aren't Unix domain sockets things on your ... sockets/connections have port numbers associated with them, ...
      (comp.lang.perl.misc)
    • Re: Local (UNIX domain) Socket understanding /Jail
      ... UNIX Domain sockets?)? ... > I have the problem that I can't get milter work in a jail and I suspect ...
      (freebsd-questions)
    • Re: Communication between Ada and Java through named pipes
      ... Adrien> overhead we can't always afford if we need high ... You can also have Unix domain sockets, ... considered better then TCP/IP. ...
      (comp.lang.ada)
    • Re: [Slightly OT] - Socket Security
      ... > knowledge of most of the folks here:) ... > I am working on a security project identifying, ... > applications that have a special, sticky-bit directory where all sockets are ... I think most versions of Unix ignore the permissions on Unix domain ...
      (comp.unix.shell)