[Bug 3987] New: PAMServiceName in Match block fails

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Aug 6 21:27:12 AEST 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=3987

            Bug ID: 3987
           Summary: PAMServiceName in Match block fails
           Product: Portable OpenSSH
           Version: 10.4p1
          Hardware: amd64
                OS: FreeBSD
            Status: NEW
          Severity: normal
          Priority: P5
         Component: PAM support
          Assignee: unassigned-bugs at mindrot.org
          Reporter: brnrd at FreeBSD.org

Documentation issue or bug?

I have a "Match Address" block where I configure PAMServiceName.
This results in 

> Directive 'PAMServiceName' is not allowed within a Match block

As per the bundled sshd_config(5) documentation for the Match keyword:

> Only a subset of keywords may be used on the lines following a
> Match keyword.  Available keywords are AcceptEnv,
> ... MaxSessions,
> PAMServiceName, ...

FreeBSD 15.1-p2
Clang 19.1.7
Running OpenSSH 10.4p1 on .
Compiled using the security/openssh-portable port configured with added
`--without-openssl`

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list