openssh bugs - Oct 2021 - [Bug 3352] New: subnet mask invalid in pattern matching

https://bugzilla.mindrot.org/show_bug.cgi?id=3352

            Bug ID: 3352
           Summary: subnet mask invalid in pattern matching
           Product: Portable OpenSSH
           Version: 8.8p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: lioh.moeller at ost.ch

We are trying to define an AllowUsers rule like
user at 2001:xxx:xxx:xxx::/64 which works fine, but using a different
subnet mask e.g. 2001:xxx:xxx:xxx::/53 leads to an error like: invalid
AllowUsers pattern

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3352

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
Are you sure the values of xxx you have elided are actually a valid /53
subnet (ie all of the bits 54-128 are zero?).

$ sudo /usr/sbin/sshd -T -o 'AllowUsers user at 2001::/53' | grep
allowusers
allowusers user at 2001::/53

$ sudo /usr/sbin/sshd -T -o 'AllowUsers user at 2001::1/53'
command-line line 0: invalid AllowUsers pattern: "user at 2001::1/53"

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3352

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED
         Resolution|---                         |WORKSFORME

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
closing for lack of followup

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3352

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
closing bugs resolved before openssh-8.9

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.