Hector Martin 'marcan' wrote:
> So right now we just have
>
> - SSH_AGENTC_REQUEST_IDENTITIES
>
> But the final ssh could do (1):
>
> - SSH_AGENTC_EXTENSION "remote-id@xxxxxxxxxxx" string("user@host")
> - SSH_AGENTC_REQUEST_IDENTITIES
I think this sounds fine.
> Or an intermediate forwarding ssh could insert a tag (2):
>
> - SSH_AGENTC_EXTENSION "forwarded-for@xxxxxxxxxxx" string("user2@host2")
> - SSH_AGENTC_REQUEST_IDENTITIES
>
> (which would of course nest with multiple chained forwards, similar to
> SMTP Received headers)
Since forwarding ssh processes just forward agent socket bytes
without tracking the protocol state in that stream adding a packet
isn't trivial.
//Peter
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
