ssh ignores invalid configuration directives in ssh_config

Bug #1061277 reported by ill
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openssh (Ubuntu)
Expired
Low
Unassigned

Bug Description

in ssh_config in /etc/ssh/, I appended "AllowUsers user1" to the file, then I rebooted the machine, then I was still able to login as user2.

Revision history for this message
Seth Arnold (seth-arnold) wrote :

There are two config files, /etc/ssh/ssh_config and /etc/ssh/sshd_config, that live in this directory. ssh_config does not respect the AllowUsers configuration option (see ssh_config(5)); sshd_config _does_ respect the AllowUsers configuration option.

Please re-check which file you have modified.

Thanks

Revision history for this message
ill (illumilore) wrote :

shouldn't it still generate an error on startup if you get that wrong?

Revision history for this message
Robie Basak (racb) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better.

Indeed it should generate an error on startup if you get that wrong, and it does for me:

With openssh-client 1:5.9p1-5ubuntu1:

$ ssh localhost
/etc/ssh/ssh_config: line 54: Bad configuration option: AllowUsers
/etc/ssh/ssh_config: terminating, 1 bad configuration options

Marking this as Incomplete for now. If you can provide accurate reproduction steps then please add them to this bug and change the status back to New.

I'm also marking as Importance: Low as it affects "unusual end-user configurations" only, as per the bug importance guidelines. This is unlikely to get fixed in Ubuntu without it being fixed upstream first, so if you'd like to see it fixed it would be best to file a bug upstream once you have detailed steps to reproduce.

Changed in openssh (Ubuntu):
status: New → Incomplete
importance: Undecided → Low
summary: - ssh ignores ssh_config
+ ssh ignores invalid configuration directives in ssh_config
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for openssh (Ubuntu) because there has been no activity for 60 days.]

Changed in openssh (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.