if allowed_ports.length > 0
sshkey = getportforwarderkey(sourcehost)
- remote_ip = scope.lookupvar('site::allnodeinfo')[sourcehost]['ipHostNumber'].join(',')
+ remote_ip = scope.lookupvar('deprecated::allnodeinfo')[sourcehost]['ipHostNumber'].join(',')
local_bind = get_local_ip_addr(sourcehost)
lines << "# from #{sourcehost}"
lines << "# insufficient config values"
else
command = "/usr/bin/portforwarder-ssh-wrap #{sourcehost} #{local_bind} #{allowed_ports.join(' ')}"
- lines << "from=\"#{remote_ip}\",command=\"#{command}\",no-pty,no-port-forwarding,no-X11-forwarding,no-agent-forwarding #{sshkey}"
+ lines << "from=\"#{remote_ip}\",command=\"#{command}\",restrict #{sshkey}"
end
end
end