[Bug 1646] Match directive does not override default settings

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Sep 3 03:53:20 EST 2009


https://bugzilla.mindrot.org/show_bug.cgi?id=1646


Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID


--- Comment #2 from Damien Miller <djm at mindrot.org> 2009-09-03 03:53:19 EST ---
Match doesn't override DenyUsers. The configuration directives that
Match can override is listed in sshd_config(5), and DenyUsers is not
among them.

If you are trying to refuse all access except to some subset of users,
I suggest that you disable all authentication methods on the main
config and then turn them back on for your allowed users in a Match
block.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list