xpra icon
Bug tracker and wiki

Opened 3 weeks ago

Closed 10 days ago

Last modified 6 days ago

#2567 closed enhancement (fixed)

make ssh connections via paramiko more configurable

Reported by: Antoine Martin Owned by: Antoine Martin
Priority: major Milestone: 4.0
Component: network Version: 3.0.x
Keywords: Cc:

Description (last modified by Antoine Martin)

OpenSSH supports configuration options, both in its config file and using the command line.
We should provide a similar way of setting options:

  • reading the openssh ssh_config if present
  • handling options in URL strings

See also:

  • #2097 SSHFP with paramiko
  • #2282 honour ssh config IdentityFile
  • #1937 paramiko support for .ssh/config

Change History (5)

comment:1 Changed 3 weeks ago by Antoine Martin

Description: modified (diff)
Status: newassigned

comment:2 Changed 3 weeks ago by Antoine Martin

Description: modified (diff)
Resolution: fixed
Status: assignedclosed

Done in r25103.

Self-explanatory examples (add --debug=ssh for debugging):

xpra attach ssh://localhost/ --ssh=paramiko:verify-hostkey=no,auth=none+password
xpra attach ssh://localhost/ --ssh=paramiko:verify-hostkey=yes,verifyhostkeydns=yes,auth=agent+key
xpra attach ssh://localhost/ --ssh=paramiko:verifyhostkeydns=no,auth=password,numberofpasswordprompts=5

comment:3 Changed 12 days ago by Antoine Martin

Resolution: fixed
Status: closedreopened

Let's also make it possible to specify the keyfile to use.

comment:4 Changed 10 days ago by Antoine Martin

Resolution: fixed
Status: reopenedclosed

As of r25180, we can also specify paramiko attributes on the URI, including the key:

XPRA_SSH_DEFAULT_KEYFILES="" xpra attach "ssh://localhost/?key=$HOME/.ssh/id_rsa&auth=key"

The same options can still be specified as a general paramiko attribute:

XPRA_SSH_DEFAULT_KEYFILES="" xpra attach "ssh://localhost/" --ssh="paramiko:key=/home/antoine/.ssh/id_rsa,auth=key"

The new XPRA_SSH_DEFAULT_KEYFILES env var is used in these examples to disable the default ssh key locations.

Important: the old URI format ssh:host/DISPLAY is no longer supported. Parsing such strings was becoming increasingly unwieldy.

See also #2582.

comment:5 Changed 6 days ago by Antoine Martin

r25180 caused a regression when there is no host config, fixed in r25214

Last edited 6 days ago by Antoine Martin (previous) (diff)
Note: See TracTickets for help on using tickets.