[augeas-devel] Semantic problem in augeas sshd lens ?

Dominique Dumont dominique.dumont at hp.com
Fri Aug 1 11:51:17 UTC 2008


Hello

I'm still testing Augeas with Config::Model [1] by loading sshd_config
in Config::Model through Config::Model::OpenSsh [2] and Augeas [3].

This currently fails because the semantic of sshd_config Subsystem is
interpreted differently on Augeas and in Config::Model::OpenSsh (the
model of sshd_config)

Augeas considers Subsystem to be a simple value (a leaf in
config-model terminology):

/files/etc/ssh/sshd_config/Subsystem = "sftp /usr/lib/openssh/sftp-server"

Where as, from the sshd_config man page and ssh man page, I
interpreted this as a hash:

man sshd_config:

Subsystem Configures an external subsystem (e.g. file transfer
             daemon).  Arguments should be a subsystem name and a
             command (with optional arguments) to execute upon
             subsystem request. The command sftp-server(8) implements
             the “sftp” file transfer subsystem. Alternately the
             name “internal-sftp” implements an in-process “sftp”
             server.  This may simplify configurations using
             ChrootDirectory to force a different filesystem root on
             clients. By default no subsystems are defined.  Note that
             this option applies to protocol version 2 only.


man ssh: 

   -s   May be used to request invocation of a subsystem on the remote
        system.  Subsystems are a feature of the SSH2 protocol which
        facili‐tate the use of SSH as a secure transport for other
        applications (eg. sftp(1)).  The subsystem is specified as the
        remote command.


So, it looks like more than one subsystem can be configured in
sshd_config so the lens should load it as an array.

Did I miss something ?

All the best

[1] http://config-model.wiki.sourceforge.net/
    http://search.cpan.org/dist/Config-Model/
[2] http://search.cpan.org/dist/Config-Model-OpenSsh/
[3] http://augeas.net

-- 
Dominique Dumont 
"Delivering successful solutions requires giving people what they
need, not what they want." Kurt Bittner




More information about the augeas-devel mailing list