[openssh-commits] [openssh] branch master updated: allow PAMServiceName in Match (regressed in 10.4)

git+noreply at mindrot.org git+noreply at mindrot.org
Tue Sep 1 15:55:15 AEST 2026


This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch master
in repository openssh.

The following commit(s) were added to refs/heads/master by this push:
     new c66bef01e allow PAMServiceName in Match (regressed in 10.4)
c66bef01e is described below

commit c66bef01e1aade7b8fce528096f1b652d2ab69a3
Author: Damien Miller <djm at mindrot.org>
AuthorDate: Tue Sep 1 15:52:38 2026 +1000

    allow PAMServiceName in Match (regressed in 10.4)
    
    During the refactor of server option parsing, the ability to set
    PAMServiceName in Match blocks was accidentally disabled.
    
    Reported by Kanishka De Silva; ok markus
---
 servconf.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/servconf.h b/servconf.h
index 3648e2be1..de5fe6dad 100644
--- a/servconf.h
+++ b/servconf.h
@@ -273,7 +273,7 @@ SSHCONF_ALIAS(KeepAlive, TCPKeepAlive, SSHCFG_GLOBAL)
 #ifdef USE_PAM
 #define SSHD_CONFIG_ENTRIES_PAM \
 SSHCONF_INTFLAG(use_pam, UsePAM, SSHCFG_GLOBAL, 0, SSHCFG_COPY_NONE) \
-SSHCONF_STRING(pam_service_name, PAMServiceName, SSHCFG_ALL, SSHCFG_COPY_NONE)
+SSHCONF_STRING(pam_service_name, PAMServiceName, SSHCFG_ALL, SSHCFG_COPY_MATCH)
 #else
 #define SSHD_CONFIG_ENTRIES_PAM \
 SSHCONF_UNSUPPORTED_INT(use_pam, UsePAM, SSHCFG_GLOBAL) \

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.


More information about the openssh-commits mailing list