Bug 2858

Summary: sshd -T requires -C when "Match" is used in sshd_config
Product: Portable OpenSSH Reporter: Simon Deziel <simon>
Component: sshdAssignee: Assigned to nobody <unassigned-bugs>
Status: CLOSED FIXED    
Severity: enhancement CC: dtucker, simon
Priority: P5    
Version: 7.7p1   
Hardware: Other   
OS: OpenBSD   
Bug Depends on:    
Bug Blocks: 2988    
Attachments:
Description Flags
Fix sshd -T w/out -C
none
Fix sshd -T w/out -C none

Description Simon Deziel 2018-04-15 07:04:53 AEST 
On a freshly installed OpenBSD 6.3, I copied sshd_config from OpenBSD 6.2 and now "sshd -T" now complains like this:

root@fw63:~# sshd -T                        
'Match User' in configuration but 'user' not in connection test specification.

Removing the match directive make it work. If I keep the match, adding "-C 'user=foo,addr=::1'" is required. According to the man page, -C is supposed to be optional and it was indeed the case on older releases.
Comment 1 Darren Tucker 2018-05-11 13:11:34 AEST 
Hm.  sshd -T should do something reasonable in that case.
Comment 2 Darren Tucker 2018-05-11 19:41:25 AEST 
Created attachment 3150 [details]
Fix sshd -T w/out -C
Comment 3 Damien Miller 2018-08-10 11:38:01 AEST 
Retarget remaining bugs planned for 7.8 release to 7.9
Comment 4 Damien Miller 2018-08-10 11:38:23 AEST 
Retarget remaining bugs planned for 7.8 release to 7.9
Comment 5 Damien Miller 2018-10-19 17:13:39 AEDT 
Retarget unfinished bugs to OpenSSH 8.0
Comment 6 Damien Miller 2018-10-19 17:14:45 AEDT 
Retarget unfinished bugs to OpenSSH 8.0
Comment 7 Damien Miller 2018-10-19 17:15:46 AEDT 
Retarget unfinished bugs to OpenSSH 8.0
Comment 8 Damien Miller 2019-04-03 10:10:29 AEDT 
Retarget outstanding bugs at next release
Comment 9 Darren Tucker 2019-04-18 19:42:28 AEST 
Created attachment 3265 [details]
Fix sshd -T w/out -C
Comment 10 Darren Tucker 2019-04-19 05:00:51 AEST 
This has been fixed and will be in the 8.1 release.  Thanks for the report.
Comment 11 Damien Miller 2021-04-23 14:54:58 AEST 
closing resolved bugs as of 8.6p1 release