Public Access
Sweep out the group-card navigation nothing reaches any more
This commit is contained in:
@@ -141,8 +141,8 @@ Nothing calls it with a proxy yet. That is deliberate and it is one step wide: s
|
||||
- The hop's own connection, and a `ForwardedPortDynamic("127.0.0.1", 0)` started on it, whose `BoundPort`
|
||||
becomes the `SshLoopbackProxy` for the connection after it. A chain of two is that twice.
|
||||
- `VaultViewModel` resolves `JumpHostIds` to hosts in the same vault, applying group inheritance per hop the
|
||||
way the target already gets it, and refuses a chain that crosses a vault — the same refusal
|
||||
`RefusesTheDrop` and the group picker already make, for the same reason.
|
||||
way the target already gets it, and refuses a chain that crosses a vault — the same refusal the group
|
||||
picker already makes, for the same reason.
|
||||
- ◆ **The target's address is resolved at the last hop, not here.** A SOCKS CONNECT names the target and the
|
||||
bastion resolves it, so what has to be stored on the host is the address *the bastion* can reach — which
|
||||
is what an `ssh_config` means by `HostName` beside a `ProxyJump`, and what the importer is already
|
||||
|
||||
Reference in New Issue
Block a user