[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ssh forwarding environment variables



on Wed, 03 Dec 2003 02:05:59PM -0800, Vineet Kumar insinuated:
> * Nori Heikkinen (nori@sccs.swarthmore.edu) [031203 13:56]:
> > on Wed, 03 Dec 2003 01:36:33PM -0800, Vineet Kumar insinuated:
> > >      PermitUserEnvironment
> > > 
> > > -- sshd_config(5)
> > 
> > hm, not in mine ... but i tried it anyhow, and got:
> > 
> > orange:~# /etc/init.d/ssh restart
> > /etc/ssh/sshd_config: line 72: Bad configuration option: PermitUserEnvironment
> > /etc/ssh/sshd_config: terminating, 1 bad configuration options
> > 
> > there appears to be nothing like that in my sshd_config manpage.  i'm
> > running ssh v3.4p1-4.
> 
> Sorry, my bad.  3.6.1 here.

so, do i need to upgrade to get this functionality?  because there's
no mention of it in the sshd_config manpage ...

is it in unstable?  (i'm not positive how to use apt-cache to show
which debian version a given version of a package is in ... i've
always used packages.debian.org for that.)

> Anyway, I think your understanding of ~/.ssh/environment is incorrect
> (though I may be wrong; I've never used this particular feature).
> 
> I belive that ~/.ssh/environment is read by sshd on the server.  
> Does it work if you have MYVAR=foo in ~/.ssh/environment on the
> remote system?  

the remote system being machine B, the one running sshd, the one into
which i'm tryng to ssh, the one on which i want the variable set?

> I don't think the local file ~/.ssh/environment matters at all.  I
> can see how the manpage (at least in this version) infers that the
> contents of the local environment file are inserted into the
> environment in the remote session, but I don't think that's how it
> really works.  

oh, you're right ... so i see.  what good is that, then?  that means
the remote (machine B) ~/.ssh/environment file can set a variable for
every ssh connection into it ... i don't see the utility of that.

> The sshd manpage spells it out in the way I would have guessed it
> would work.  If I'm right about this (I haven't tested it at all) a
> bug should be filed against ssh for the poor explanation of
> environment in the ssh(1) manpage.

i think it explained it decently -- i just willfully misinterpreted it
to make it mean what i wanted it to :)

is it possible to do what i want, then -- which is to export a
variable by ssh from machine A into machine B's environment?  maybe by
some other method?

thanks,

</nori>

-- 
    .~.      nori @ sccs.swarthmore.edu
    /V\  http://www.sccs.swarthmore.edu/~nori/jnl/
   // \\          @ maenad.net
  /(   )\       www.maenad.net
   ^`~'^
*------------------------------------------------------------------------*
* http://www.aidsmarathon.com/participant.asp?runner=DCNO-3267&year=2003 *
*------------------------------------------------------------------------*
*           Please help me raise money for AIDS as I train for           *
*                  the Whitman-Walker AIDS Marathon!                     *
*------------------------------------------------------------------------*

Attachment: pgpYu8J1xjlKH.pgp
Description: PGP signature


Reply to: