[resending after subscribing, sorry for the possible duplicate]
03.09.2021 20:02, Jochen.Bern at binect.de (Jochen Bern) пишет:
On 03.09.21 11:55, Florian Weimer wrote:
Most distributions send locale environment variables by default:
[...]
And accept them on the server side:
[...]
Now that servers often use minimal installations which only support a
small set of locales (C, C.UTF-8), would it make sense to discontinue
this practice?
In order to achieve what exactly?
I'm no stranger to putting "export LANG=C" into shell scripts so that I
can reliably parse command outputs, but on the other hand, our servers
do document processing and some of the 3rd party software used will
introduce strange misrepresentations unless we have both(!) en_US.UTF-8
and de_DE.UTF-8 installed. Allowing the respective variables to be
carried from client to server automatically keeps users from getting
innovative with ~/.bashrc and the like ...
I would rather not forward the locale settings, and especially not
accept them on the server side, and here is why.
More and more newbie Linux/cloud sysadmins use MacOS, not Linux, as
their main system, and we have to deal with it. MacOS, by default, sends
locale-related environment variables. Here is their default
configuration in /etc/ssh/ssh_config, minus comments:
Host *
SendEnv LANG LC_*
So, it will send locale-related environment variables. Here is the
default environment on a Mac running Big Sur:
TMPDIR=/var/folders/sj/81q_d2g14f9_9_q5qp79yp3r0000gn/T/
__CFBundleIdentifier=com.apple.Terminal
XPC_FLAGS=0x0
TERM=xterm-256color
SSH_AUTH_SOCK=/private/tmp/com.apple.launchd.ofNlVbvqiZ/Listeners
XPC_SERVICE_NAME=0
TERM_PROGRAM=Apple_Terminal
TERM_PROGRAM_VERSION=440
TERM_SESSION_ID=220850B1-9079-4EC2-BE40-E5A79112F574
SHELL=/bin/zsh
HOME=/Users/user
LOGNAME=user
USER=user
PATH=/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin
SHLVL=1
PWD=/Users/user
OLDPWD=/Users/user
LC_CTYPE=UTF-8
_=/usr/bin/env
On Debian, the server-side configuration (minus comments) is as follows:
ChallengeResponseAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
So it accepts locale-related variables. Including this one:
LC_CTYPE=UTF-8
But, this is valid on MacOS only. It is not a valid locale on Linux, and
will never be. So, MacOS users that try to ssh to Debian systems will
see locale errors (e.g. from Perl programs), and they often don't know
why these errors appear and how to fix them. They would be better served
by the Debian server applying its default locale settings. I even had to
add some slides about this problem to my (proprietary and commercial)
Linux sysadmin course, and would love to remove them.
--
Alexander E. Patrakov
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
