Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Nov 2021 18:21:36 +0100
From:      Miroslav Lachman <000.fbsd@quip.cz>
To:        freebsd-stable@freebsd.org
Subject:   sshd -T does not work with Match
Message-ID:  <1a5aa3d1-c544-568c-543a-10e626ac7e7e@quip.cz>

next in thread | raw e-mail | index | archive | help
I don't know if this should be considered as bug or "just changed behavior".
sshd -T works in FreeBSD 11.4 (OpenSSH_7.5) and prints details about 
current configuration but it does not work with the same configuration 
file in FreeBSD 12.2 (OpenSSH_7.9).

# sshd -T
'Match Group' in configuration but 'user' not in connection test 
specification.

Once I have any "Match" in sshd_config then sshd -T does not work. It 
needs additional -C user=fakeuser to print configuration. (I just needed 
to view supported ciphers)

You can try it with default sshd_config and add something like this:

Match group sftponly
         ChrootDirectory %h

...or just ucomment section "Match User anoncvs".

I think sshd -T should still work without -C as it was in older versions 
and print configuration for any non-matched criteria.

Kind reagards
Miroslav Lachman



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1a5aa3d1-c544-568c-543a-10e626ac7e7e>