On Wed, May 03, 2006 at 10:29:56PM +0200, Florian Weimer wrote:
> * Marc Haber:
> > If this is already possible without wrapping the ssh client, the
> > documentation is too well hidden.
> 
> It's called ProxyCommand.  The additional overhead should be
> negligible.

The uglyness of the configuration in this case is not negligible:

proxycommand sh -c 'knock <knock params>; sleep 1; exec socket %h %p'

is absolutly ugly, means one more process, the ssh client giving up
control over the TCP connection and other things. A bad hack, IMO.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to