Unable to use the Banner keyword in a Match Block in OpenSSH 4.4p1

[Darren Tucker]

Peter Stuge wrote:
> Hi Rita,
> 
> On Thu, Aug 23, 2007 at 11:44:53PM -0400, ritamcm at earthlink.net wrote:
>> However, when I look at the manual page for sshd_config at
>> openssh.org, Banner is listed as an keyword under Match.  What is
>> the correct way to use the Banner keyword in a Match block in
>> openssh 4.4p1?  
> 
> I'm not sure that is possible. The man page probably refers to the
> very latest release of OpenSSH.

Actually by default the man page links show the development version, ie 
CVS HEAD.  You can use the little drop-down to select OpenBSD 4.1 
(OpenSSH 4.6) or OpenBSD 4.0 (OpenSSH 4.4) and compare.

Where possible, you should always refer to the man pages that shipped 
with the binaries that you're using as they are authoritative for those 
binaries.

> 4.4p1 is a bit old. Match support has
> been added for several directives lately and Banner may be one of
> them.

Exactly so.  Support for keywords used before authentication, including 
Banner, was added in OpenSSH 4.6.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.