openssh bugs - Jun 2022 - [Bug 3453] New: User override in Host not respected

https://bugzilla.mindrot.org/show_bug.cgi?id=3453

            Bug ID: 3453
           Summary: User override in Host not respected
           Product: Portable OpenSSH
           Version: 8.6p1
          Hardware: amd64
                OS: Mac OS X
            Status: NEW
          Severity: minor
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: mattfleming.au at gmail.com

Hello,

It seems that the User directive isn't resolved correctly inside a Host
anymore. Example below - note ssh is using matthewfl not matt.fleming
as configured. This was working fine with a previous version. It works
correctly if the top level User is removed.

# ~/.ssh/config

#
https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt
UseRoaming no

Compression yes

User matthewfl

Host aws-bastion
    User matt.fleming
    Hostname 54.252.158.21

Host dev-*
    User matt.fleming
    ProxyJump matt.fleming at 54.252.158.21

Host dev-ssw
    HostName 172.22.5.60
    User matt.fleming

?matthew?~/.ssh??? ssh dev-ssw
matthewfl at 172.22.5.60: Permission denied
(publickey,gssapi-keyex,gssapi-with-mic).
?matthew?~/.ssh??? ssh aws-bastion
matthewfl at 54.252.158.21: Permission denied
(publickey,gssapi-keyex,gssapi-with-mic).

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3453

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
This is how it's always worked: first match for a specifc keyword wins.
 Quoting ssh_config(5):

     For each parameter, the first obtained value will be used.  The
configu-
     ration files contain sections separated by Host specifications,
and that
     section is only applied for hosts that match one of the patterns
given in
     the specification.

If you want to override User, put it at the top of the file.  If you
want to provide a default User, put it at the bottom of the file.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3453

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WONTFIX
             Status|NEW                         |RESOLVED
                 CC|                            |djm at mindrot.org

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3453

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
OpenSSH 9.3 has been released. Close resolved bugs

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.