[Bug 3334] document `none` keyword for ProxyJump

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat Aug 7 06:31:16 AEST 2021


https://bugzilla.mindrot.org/show_bug.cgi?id=3334

--- Comment #3 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Christoph Anton Mitterer from comment #2)
[...]
> but what when one has:
> 
> > Host login.example.org
> >    SomeOtherStuff
> > Host *.example.org
> >    ProxyJump login.example.org
> 
> In that case, would SomeOtherStuff still be loaded?

Yes.  The parser is first-match for each keyword.  From ssh_config(5):

     For each parameter, the first obtained value will be used.  The
     configuration files contain sections separated by Host
specifications,
     and that section is only applied for hosts that match one of the
patterns
     given in the specification.  The matched host name is usually the
one
     given on the command line (see the CanonicalizeHostname option for
     exceptions).

     Since the first obtained value for each parameter is used, more
host-
     specific declarations should be given near the beginning of the
file, and
     general defaults at the end.

> Or similarly if login.example.org had another ProxyJump to another
> host?

Then it'll get used.   It'll only report a jumphost loop if the host,
port and user are all end up all identical.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list