Re: What's the deal on the -X vs -Y thing?
From: Darren Tucker (dtucker_at_dodgy.net.au)
Date: 01/26/05
- Next message: all mail refused: "Re: How to prevent or quickly fix hosed ssh tunnels"
- Previous message: all mail refused: "Re: What's the deal on the -X vs -Y thing?"
- In reply to: Neil W Rickert: "Re: What's the deal on the -X vs -Y thing?"
- Next in thread: Neil W Rickert: "Re: What's the deal on the -X vs -Y thing?"
- Reply: Neil W Rickert: "Re: What's the deal on the -X vs -Y thing?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 26 Jan 2005 01:03:40 GMT
In article <ct4c0n$umu$1@usenet.cso.niu.edu>,
Neil W Rickert <rickert+nn@cs.niu.edu> wrote:
>Host *
> ForwardAgent no
> ForwardX11 no
> ForwardX11Trusted yes
> StrictHostKeyChecking ask
>
> -----
>
>and all works fine.
>
>I first tried that with only a specific host -- the one where I
>most needed trusted X-forwarding. But that didn't work very well,
>so I made it apply to all. In practice, I only do X forwarding to
>trusted hosts anyway. My default is to forward neither X nor agent.
I suspect that was because you had a Host * entry at the top of the
config file.
The config parser is "first match" not "longest match" and processes
command line, user config, global config and defaults, in that order.
For example, if you have the following in a config file:
Host *
ForwardX11Trusted no
Host a
ForwardX11Trusted yes
when ssh'ing to host "a", the "Host *" block will set ForwardX11Trusted
and the entry in "Host a" won't override it.
The upshot is:
- if you want a global _override_, put a "Host *" block at the top
of the config file
- if you want a global _default_, put a "Host *" block at the bottom
of the config file.
--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
- Next message: all mail refused: "Re: How to prevent or quickly fix hosed ssh tunnels"
- Previous message: all mail refused: "Re: What's the deal on the -X vs -Y thing?"
- In reply to: Neil W Rickert: "Re: What's the deal on the -X vs -Y thing?"
- Next in thread: Neil W Rickert: "Re: What's the deal on the -X vs -Y thing?"
- Reply: Neil W Rickert: "Re: What's the deal on the -X vs -Y thing?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
