[Bug 3275] PermitListen does not work in Match block and permitlisten= does not work in authorized_keys file

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Mar 10 21:05:46 AEDT 2021


https://bugzilla.mindrot.org/show_bug.cgi?id=3275

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
Are you sure you are running the new binary?  Because...

(In reply to Evgeny from comment #0)
> * OpenSSH_8.5p1, OpenSSL 1.0.2k-fips  26 Jan 2017 built from sources:
> ./configure --with-md5-passwords --with-pam --with-selinux
> --with-privsep-path=/var/lib/sshd/ --sysconfdir=/etc/ssh

by default sshd is installed in /usr/local/sbin:

$ ./configure --help
[...]
  --prefix=PREFIX   install architecture-independent files in PREFIX
                    [/usr/local]

and unless you changed the systemd unit file it's probably running the
vendor supplied one in /usr/sbin.  A quick test with 8.5p1 here seems
to work with the fragment you quote:

$ cat config
Match User dtucker
        PermitListen localhost:5555
$ sudo `pwd`/sshd -f `pwd`/config -ddde -p 2022 2>&1 | grep -i permit
debug3: reprocess config:2 setting PermitListen localhost:5555

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list