Hi, everyone I’m developing an internal bastion system for my company. It synchronize ssh public keys to ‘~/.ssh/authorized_keys’ and set ‘COMMAND’ option to attach different Docker container for different user. Basically something like this: restrict,pty,command=“/usr/bin/docker exec -ti bunker-1-ryan /bin/bash" ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQg401lnhl+hNzFpESjN+XvBkR/swIaHYP1no8lmcUJB25OF5ZP6vAN4Nh2EqULqUQ8tSpuFzistO+SwIn10OM8bzAy/OEWoHQUcjvJ1aS4kyZi9HKmfj66K7Mnm78Q7uc1jiDAzn0aZkQzR7hVj0jSXRXD68Q7el3DllgunyfsQs4yXroAFHO6g+mcO8jd71jZx0nB3dpnSlqJuFGl5nJlWoSaw6aTrW0wYdVk/YqpQtYGOGS/lzLvUj0eMIIYZ2w3L+ZVSFPcWkgf80TPVvQD6kmlWcbStR4xNW2dmL09WlYH+SLPu4BCvvPU0vCO83Y+u2qSqBTRKA/S0Xm0Nx1 ryan@xxxxxxxxxxxxxx But the problem is ‘scp' does not work, I wonder how to handle ‘scp' requests with custom COMMAND option. Thanks. Yanke Guo (Ryan) ryan@xxxxxxxxxxxxxx
Attachment:
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
