[Bug 2161] New: AuthorizedKeysCommand is not executed when defined inside Match block

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri Oct 18 05:04:25 EST 2013


https://bugzilla.mindrot.org/show_bug.cgi?id=2161

            Bug ID: 2161
           Summary: AuthorizedKeysCommand is not executed when defined
                    inside Match block
           Product: Portable OpenSSH
           Version: -current
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: wijet at wijet.pl

I have the following at the end of my sshd_config

Match User git
  AuthorizedKeysCommand /opt/git/authorized_keys
  AuthorizedKeysCommandUser git

When I ssh as git user I see in logs the following:

Oct 17 19:59:58 cc sshd[6136]: debug3: checking match for 'User git'
user git host X addr IP laddr IP lport 22
Oct 17 19:59:58 cc sshd[6136]: debug1: user git matched 'User git' at
line 84
Oct 17 19:59:58 cc sshd[6136]: debug3: match found
Oct 17 19:59:58 cc sshd[6136]: debug3: reprocess config:85 setting
AuthorizedKeysCommand /opt/git/authorized_keys
Oct 17 19:59:58 cc sshd[6136]: debug3: reprocess config:86 setting
AuthorizedKeysCommandUser git

but the AuthorizedKeysCommand is not invoked. When I remove Match
block, everything works as expected.
I tried to remove AuthorizedKeysCommandUser from the inside of the
block, but it doesn't help.

My SSH version is: OpenSSH_6.2p2 Debian-6, OpenSSL 1.0.1e 11 Feb 2013

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list