[PATCH] SSH: Ignore the default_domain_suffix

[Jakub Hrozek]

Honza, can you review, please?

To reproduce, just set default_domain_suffix on an IPA trust client to
the AD domain value in the [sssd] section:

[sssd]
services = nss, pac, sudo, pam, ssh
domains = linux.test
config_file_version = 2
default_domain_suffix = ad.example.com

Then request a host:
sss_ssh_knownhostsproxy ipa1.linux.test

btw default_domain_suffix is already ignored for the autofs responder.

[Jan Cholasta]

Hi,

Dne 24.3.2015 v 21:22 Jakub Hrozek napsal(a):
>  Honza, can you review, please?
>
>  To reproduce, just set default_domain_suffix on an IPA trust client to
>  the AD domain value in the [sssd] section:
>
>  [sssd]
>  services = nss, pac, sudo, pam, ssh
>  domains = linux.test
>  config_file_version = 2
>  default_domain_suffix = ad.example.com
>
>  Then request a host:
>  sss_ssh_knownhostsproxy ipa1.linux.test
>
>  btw default_domain_suffix is already ignored for the autofs responder.
>  
LGTM.

(This doesn't seem to be related to SSH, but rather domain handling, I'm 
not sure if I have enough expertise for a full ACK.)

Honza

-- 
Jan Cholasta

[Pavel Březina]

On 03/31/2015 07:43 AM, Jan Cholasta wrote:
>  Hi,
>
>  Dne 24.3.2015 v 21:22 Jakub Hrozek napsal(a):
> > Honza, can you review, please?
> >
> > To reproduce, just set default_domain_suffix on an IPA trust client to
> > the AD domain value in the [sssd] section:
> >
> > [sssd]
> > services = nss, pac, sudo, pam, ssh
> > domains = linux.test
> > config_file_version = 2
> > default_domain_suffix = ad.example.com
> >
> > Then request a host:
> > sss_ssh_knownhostsproxy ipa1.linux.test
> >
> > btw default_domain_suffix is already ignored for the autofs responder.
> >
>
>  LGTM.
>
>  (This doesn't seem to be related to SSH, but rather domain handling, I'm
>  not sure if I have enough expertise for a full ACK.)
>
>  Honza
>  
Ack.

[Jakub Hrozek]

On Tue, Mar 31, 2015 at 03:35:59PM +0200, Pavel Březina wrote:
>  On 03/31/2015 07:43 AM, Jan Cholasta wrote:
>  >Hi,
>  >
>  >Dne 24.3.2015 v 21:22 Jakub Hrozek napsal(a):
>  >>Honza, can you review, please?
>  >>
>  >>To reproduce, just set default_domain_suffix on an IPA trust client to
>  >>the AD domain value in the [sssd] section:
>  >>
>  >>[sssd]
>  >>services = nss, pac, sudo, pam, ssh
>  >>domains = linux.test
>  >>config_file_version = 2
>  >>default_domain_suffix = ad.example.com
>  >>
>  >>Then request a host:
>  >>sss_ssh_knownhostsproxy ipa1.linux.test
>  >>
>  >>btw default_domain_suffix is already ignored for the autofs responder.
>  >>
>  >
>  >LGTM.
>  >
>  >(This doesn't seem to be related to SSH, but rather domain handling, I'm
>  >not sure if I have enough expertise for a full ACK.)
>  >
>  >Honza
>  >
>  
>  Ack. 
* master: eeecc48d22a28bb69da56f6ffd8824163fc9bf00