bugzilla-daemon at mindrot.org
2012-Aug-08  18:22 UTC
[Bug 2031] New: ssh config parser ignores host-specific overrides after wildcard.
https://bugzilla.mindrot.org/show_bug.cgi?id=2031
          Priority: P5
            Bug ID: 2031
          Assignee: unassigned-bugs at mindrot.org
           Summary: ssh config parser ignores host-specific overrides
                    after wildcard.
          Severity: minor
    Classification: Unclassified
                OS: Linux
          Reporter: openssh at richardneill.org
          Hardware: amd64
            Status: NEW
           Version: 5.9p1
         Component: ssh
           Product: Portable OpenSSH
My (simplified) .ssh/config file contains:
------
Host *
   [Default opts]
   ForwardX11 yes
Host galaxy
    User root
    ForwardX11 no
------
If I then run "ssh -v galaxy", it correctly shows that it is picking
up
the "root" option, but it is failing to pick up the host-specific
override to turn off ForwardX11.
(What I have is a system-wide default to no X11 Forward, a personal
default for X11 forwarding, and a single host which shouldn't do X11
forwarding)
A very careful reading of the man page suggests that this may not,
strictly-speaking, be a bug, but I don't think it's doing what the 
user intends either. In my view, later options should override earlier
options, rather than being ignored. 
P.S. Thanks for your time, and a really useful program.
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
bugzilla-daemon at mindrot.org
2012-Aug-08  23:18 UTC
[Bug 2031] ssh config parser ignores host-specific overrides after wildcard.
https://bugzilla.mindrot.org/show_bug.cgi?id=2031
Darren Tucker <dtucker at zip.com.au> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au
             Status|NEW                         |RESOLVED
         Resolution|---                         |WORKSFORME
--- Comment #1 from Darren Tucker <dtucker at zip.com.au> ---
This is by design: you can put overrides at the top and defaults at the
bottom.  From the second paragraph of ssh_config(5):
"Since the first obtained value for each parameter is used, more
host-specific declarations should be given near the beginning of the
file, and
general defaults at the end."
Sorry, but's worked this way for over a decade and I don't see it
changing now, especially given it'll possibly break existing working
configs.
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
bugzilla-daemon at mindrot.org
2012-Aug-09  01:22 UTC
[Bug 2031] ssh config parser ignores host-specific overrides after wildcard.
https://bugzilla.mindrot.org/show_bug.cgi?id=2031 --- Comment #2 from Richard Neill <openssh at richardneill.org> --- Oh dear oh dear, no points at all for my reading comprehension! Sorry for the erroneous report. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug.
bugzilla-daemon at mindrot.org
2015-Aug-11  13:02 UTC
[Bug 2031] ssh config parser ignores host-specific overrides after wildcard.
https://bugzilla.mindrot.org/show_bug.cgi?id=2031
Damien Miller <djm at mindrot.org> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED
--- Comment #3 from Damien Miller <djm at mindrot.org> ---
Set all RESOLVED bugs to CLOSED with release of OpenSSH 7.1
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
Possibly Parallel Threads
- [Bug 1916] New: Wish: support multiple alternative hostnames for a given host alias (useful with NAT)
 - [Bug 3578] New: RFE: forward error correction
 - shorewall startup speed - an idea
 - BAD PASSWORD: it is based on a dictionary word
 - uninitialized constant Facter::IPAddress (NameError)