openssh bugs - Apr 2010 - [Bug 1764] New: Allow AuthorizedKeysFile in Match

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

           Summary: Allow AuthorizedKeysFile in Match
           Product: Portable OpenSSH
           Version: -current
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: sshd
        AssignedTo: unassigned-bugs at mindrot.org
        ReportedBy: djm at mindrot.org


Setting "AuthorizedKeysFile /dev/null" is a handy way to disable
public
keys while leaving centrally-specified certificate keys active.
Unfortunately it isn't supported by Match.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|                            |1708

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

--- Comment #1 from Damien Miller <djm at mindrot.org>  ---
Created attachment 1862
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1862
/home/djm/more-match.diff

Add more options to match, including AuthorizedKeysFile

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

--- Comment #2 from Damien Miller <djm at mindrot.org>  ---
Created attachment 1863
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1863
/home/djm/more-match.diff

Add more options to match, including AuthorizedKeysFile

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1862|0                           |1
        is obsolete|                            |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1863|                            |ok?(dtucker at zip.com.au)
              Flags|                            |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

--- Comment #3 from Iain Morgan <imorgan at nas.nasa.gov>  ---
Created attachment 1876
  --> https://bugzilla.mindrot.org/attachment.cgi?id=1876
Also update the list of options that work with Match in sshd_config(5)

As an aside, I wonder if it would be better to list the options that
work with Match one-per-line, as is done for the description of the -o
switch in ssh(1). That seems more readable to me.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #1863|ok?(dtucker at zip.com.au)     |ok+
              Flags|                            |

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #4 from Damien Miller <djm at mindrot.org>  ---
applied - thanks. This will be in openssh-5.6.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.

https://bugzilla.mindrot.org/show_bug.cgi?id=1764

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #5 from Damien Miller <djm at mindrot.org> 2011-01-24 12:33:35
EST ---
Move resolved bugs to CLOSED after 5.7 release

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching the reporter.