Secure Shell UNIX domain socket redirection to Proposed Standard

lauri <lauri.vosandi@gmail.com> Tue, 14 December 2010 20:01 UTC

DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=f1+Suz42yg9XZ8oVzz9mrV7VKpuHxPIeIWRACqI/iiW6AOS7NKakyY4Quqk3gEa/Zk oRjNy5f6g+dJdb9gX9uuUmtYVFnfPm/5hGeXiVCF+OgLATeiX9Ysi5kkzPPMNMSGaAb5 +b2EkQzCuchw7ooO3WWSgs42r4vIdvp0XmNEg=
MIME-Version: 1.0
In-Reply-To: <AANLkTi=MmbBxKoUkN2qgr_++FcWQ+ZgwEhiKeUCDBYnU@mail.gmail.com>
References: <AANLkTi=MmbBxKoUkN2qgr_++FcWQ+ZgwEhiKeUCDBYnU@mail.gmail.com>
Date: Tue, 14 Dec 2010 22:03:11 +0200
Message-ID: <AANLkTin73Sja0VZrsvw=Zv2sCpY4ns+yt6LKOiz7Xg1w@mail.gmail.com>
Subject: Secure Shell UNIX domain socket redirection to Proposed Standard
From: lauri <lauri.vosandi@gmail.com>
To: ietf@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Precedence: list

Good evening,

on GNU/Linux boxes there are many services which use UNIX domain
sockets for inter-process communication. Most of them also support TCP
sockets, but that needs additional code for authentication.

There used to be streamlocal patch which implemented UNIX domain
socket redirection for OpenSSH but now it seems to be dead:
http://www.25thandclement.com/~william/projects/streamlocal.html

Generally I think it would be good idea to have UNIX domain socket
redirection in Secure Shell standard because the difference between
TCP/IP redirection code and the one used for UNIX domain sockets is
minor. The feature would benefit many LTSP deployments and other
installations aswell.

Blogpost related to the lack of UNIX domain socket redirection in
Secure Shell standard can be found here:
http://v6sa.wordpress.com/2010/12/01/gnulinux-based-terminal-servers-with-smartcard-support/

-- 
Lauri Võsandi
tel: +372 53329412
e-mail: lauri.vosandi@gmail.com
company: Povi Software OÜ (http://www.povi.ee)
blog: http://v6sa.wordpress.com/

Secure Shell UNIX domain socket redirection to Pr… lauri
Secure Shell UNIX domain socket redirection to Pr… lauri
RE: Secure Shell UNIX domain socket redirection t… Worley, Dale R (Dale)
Re: Secure Shell UNIX domain socket redirection t… lauri