openssh bugs - Jun 2021 - [Bug 3324] New: SSH client does not use correct user when ProxyJump option specified

https://bugzilla.mindrot.org/show_bug.cgi?id=3324

            Bug ID: 3324
           Summary: SSH client does not use correct user when ProxyJump
                    option specified
           Product: Portable OpenSSH
           Version: 8.6p1
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P4
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: jordanatararimu at gmail.com

Created attachment 3529
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3529&action=edit
ssh test at visor.home debug log

When using 'ssh test at visor.com'
           or 
           'ssh visor.com -o User=test'

With the following ssh_config, the user is instead set to the current
user instead of the user specified user. 

E.g 

If my user is "bob" and I do 'ssh test at visor.home', the
user that will
be used for authentication for both the jump host and for the target is
"bob" instead of "test".

Host gateway.bastion
        ControlMaster auto
        ControlPath /tmp/bastion-%r@%h:%p
        ControlPersist 10m      
        IdentityFile ~/.ssh/id_ed25519
        Port 4343
        HostName example.com


Host *.home
        Port 4343
        IdentityFile ~/.ssh/id_ed25519
        ProxyJump gateway.bastion

Host visor.home
        HostName 10.0.0.3

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3324

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org>
---
> If my user is "bob" and I do 'ssh test at visor.home',
the user that
> will be used for authentication for both the jump host and for >
> the target is "bob" instead of "test".
It's definitely intended that the default user ("bob" here) would
be
used to authenticate to the ProxyJump host, because that hasn't been
overridden anywhere. Note that that a non-default destination username
is deliberately *not* used automatically for the jump host - you need
to specify it explicitly, either on the ProxyJump commandline/directive
(ProxyJump user at host) or in the Host/Match block for the jump host in
your config.

It's not intended that the default user would be used to authenticate
to the destination host when another is specified on the commandline.
However, I can't replicate the behaviour you're seeing however: when I
try a modified version of your config the destination uses the user
specified on the commandline.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3324

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WORKSFORME

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Closing for lack of followup

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3324

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
closing bugs resolved before openssh-8.9

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.