Hi
I am playing around in my lab with a set of centos 8 and centos 7 VM's trying to make automount do some magic. All client VM's is fully IPA integrated - and that it seems to make bash completion unavailable when I hit TAB to complete the fqdn after ssh [hostname]..
I guess that this is due to there is no .ssh/known_hosts in a ipa integrated client. But at the same time it is really annoying that to satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
So before I start building my own bash completion something, I would like to know if any of you have knowledge of a easy solution, some pre-boiled howto, rpm or else?
On pe, 15 touko 2020, Klaus Vink Slott via FreeIPA-users wrote:
Hi
I am playing around in my lab with a set of centos 8 and centos 7 VM's trying to make automount do some magic. All client VM's is fully IPA integrated - and that it seems to make bash completion unavailable when I hit TAB to complete the fqdn after ssh [hostname]..
I guess that this is due to there is no .ssh/known_hosts in a ipa integrated client. But at the same time it is really annoying that to satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
So before I start building my own bash completion something, I would like to know if any of you have knowledge of a easy solution, some pre-boiled howto, rpm or else?
The completion is done in /usr/share/bash-completion/bash_completion, there is a generic function _known_hosts_real that is used in many places in the completions. This function performs a lot of checks in system-wide and user's ssh configuration files and their includes.
Klaus Vink Slott via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
But at the same time it is really annoying that to satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
I have the following in my laptops ~/.ssh/config:
,---- | CanonicalizeHostname always | CanonicalDomains example.org `----
Jochen
Jochen Kellner via FreeIPA-users wrote:
Klaus Vink Slott via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
But at the same time it is really annoying that to satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
I have the following in my laptops ~/.ssh/config:
,---- | CanonicalizeHostname always | CanonicalDomains example.org `----
Perhaps the sssd global file /var/lib/sss/pubconf/known_hosts
It don't always contain all hosts but it will grow over time I imagine. I'm not sure of their implementation.
rob
On 15.05.2020 - 19.02 Rob Crittenden wrote:
Jochen Kellner via FreeIPA-users wrote:
Klaus Vink Slott via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
But at the same time it is really annoying that to satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
I have the following in my laptops ~/.ssh/config: ,---- | CanonicalizeHostname always | CanonicalDomains example.org `----
If I cant make the below work. That is definitely better than now.
Perhaps the sssd global file /var/lib/sss/pubconf/known_hosts
That seems like a good target. I'll look into pulling that in.
-- Thanks!
On 15.05.2020 19.07 I wrote:
On 15.05.2020 - 19.02 Rob Crittenden wrote:
Jochen Kellner via FreeIPA-users wrote:
Klaus Vink Slott via FreeIPA-users freeipa-users@lists.fedorahosted.org writes:
But at the same time it is really annoying that to satisfy kerberos, I have to type the fqdn at the ssh prompt every time.
I have the following in my laptops ~/.ssh/config: ,---- | CanonicalizeHostname always | CanonicalDomains example.org `----
If I cant make the below work. That is definitely better than now.
Perhaps the sssd global file /var/lib/sss/pubconf/known_hosts
That seems like a good target. I'll look into pulling that in.
So it seems that this file is hashed and I did not find a easy way around that. But then it occurred to me that the fqdn is most likely present in bash_history. Googling that found me this solution:
https://unix.stackexchange.com/questions/291510/autocomplete-hostnames-when-...
Combining with CanonicalDomains I think improved my IPA life :-)
freeipa-users@lists.fedorahosted.org
-
Alexander Bokovoy -
Jochen Kellner -
Klaus Vink Slott -
Rob Crittenden