dropbear subsystem for netconf

Matt Johnston matt at ucc.asn.au
Wed Sep 28 10:47:35 AWST 2022


On 2022-09-23 9:35 am, 方媛 wrote:

> Hi, I need you help about dropbear subsystem for netconf. 
> 
> IF I use sshd for netconf(NETCONF SSH binding rfc6242),the net topology is here. netconf_cli and sshd established TCP connection throuth port 830, sshd subsystem(netconf_subsystem) and netconfd-server established local socket connection. So when sshd port 830 received data, sshd send to netconf_subsystem stdin, then netconf_subsystem forward data to netconfd-server. 
> 
> How can I do this on dropbear. Does it need to be implemented via dbclient? what is the command? How to build the topology. 
> 
> Thanks very much.

Hi, 

On the node1 side, I think your netconf client program will run dbclient
as "dbclient -p 830 -s netconf  node2.example.com", and use that for the
SSH transport. 

On the node2 server side Dropbear would need to be modified so that it
will run a "netconf_subsystem" program when it gets a request for
"netconf". You could use sftp as an example, that runs the configured
program SFTPSERVER_PATH. See
https://github.com/mkj/dropbear/blob/17e02fe614065025a11d544ec17264f209272f11/svr-chansession.c#L687


I'm not entirely clear on what configuration you're trying to set up -
let me know if you have questions. 

Cheers,
Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/attachments/20220928/74076167/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1663895987879.png
Type: image/png
Size: 9580 bytes
Desc: not available
URL: <https://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/attachments/20220928/74076167/attachment.png>


More information about the Dropbear mailing list