On Fri, Feb 19, 2016 at 03:27:50PM +0100, Harald Dunkel wrote:
> Hi Lukas,
> 
> I found an ubuntu manpage saying sss_ssh_knownhostsproxy is
> an experimental feature. 
> Would you suggest to drop it
> in ipa-client-install?

It's not experimental (at least upstream) for several years.. What sssd
version is that?

> 
> IMHO this is a pretty annoying bug. I rely upon a port
> redirection for ssh on IPv4. For IPv6 there is no
> redirection, but the port is blocked in the packet filter.

Would it help to set lookup_family_order to ipv4_only here so that ipv6
is not even tried (or the other way around, depending on which AF you
want to try..)

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to