[Bug 3843] New: Multiple tags

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Jun 24 09:17:03 AEST 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3843

            Bug ID: 3843
           Summary: Multiple tags
           Product: Portable OpenSSH
           Version: 10.0p2
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: nix-muell at gmx.net

Having finally updated my last pre v9.4 client, i can now use tags.
Lil' bummer; they don't work quite as anticipated. I'd love have more
than one tag per connection.
Even the only blog post about openssh tags (that I'm aware of)
wrongfully thought a connection setup can have multiple dynamically
assigned tags.

'Match tagged' is already parsed as a comma separated list. Why are the
'Tag ...' config and '-P' option not?

Lazy admin like me could do something like `ssh 10.temporary.ip.address
-P new` or `ssh host.about-to-be.changed -P temp,local` and have a
beautiful generalized config like 

```
Match tagged local
    ProxyJump none

Match 10.*.*.*
    ProxyJump companyBastionHost

Match tagged new
    User setupuser
    Tag temp
    Tag SetB
#or Tag +temp,SetB

Match tagged temp
    User free-for-all
    UserKnownHostsFile /dev/null
    LogLevel ERROR

Match tagged SetA
    Agent path
    IdentityFile key-1.pub
    IdentityFile key-2.pub

Match tagged SetB
    Agent maybe/different
    IdentityFile certainly/different.pub
```
Not a real example, but think of the possibilities.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list