Displaying 2 results from an estimated 2 matches for "authorizedprincipalscommandus".
Did you mean:
authorizedprincipalscommand
2015 Nov 02
3
[Bug 2489] New: options that can be used in Match blocks but aren't documented as such
...ity: P5
Component: Documentation
Assignee: unassigned-bugs at mindrot.org
Reporter: calestyo at scientia.net
Hey
sshd_config seems to not list those options as being usable inside
Match blocks, while servconf.c seems to mark them as such:
-authorizedprincipalscommand
-authorizedprincipalscommanduser
-gssapiauthentication
-kerberosauthentication
And
-authorizedkeysfile2
but IIRC that was deprecated anyway.
Cheers,
Chris.
--
You are receiving this mail because:
You are watching the assignee of the bug.
2023 May 22
6
[Bug 3574] New: ssh ignores AuthorizedPrincipalsCommand if AuthorizedKeysCommand is also set
...ommit ID 9c4305631d20c2d194661504ce11e1f68b20d93e
sshd_config parser was switched to a newer tokanizer. As a result of
this, a new bug was introduced that causes the parser to ignore
AuthorizedPrincipalsCommand if AuthorizedKeysCommand is also set.
To Reproduce
Set AuthorizedPrincipalsCommand and AuthorizedPrincipalsCommandUser to
a valid value in sshd_config.
Set AuthorizedKeysCommand and AuthorizedKeysCommandUser to a valid
value. Suggest using a script that will touch a file to prove it was
executed.
Reload sshd and login.
AuthprizedKeysCommand will not be executed.
Remove AuthorizedKeysCommand from the sshd_config...