Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 08 Sep 2021 01:42:03 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 248923] .ssh/authorized_keys2 working accoding to response to a previous PR
Message-ID:  <bug-248923-227-du7i0UA8rU@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-248923-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-248923-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D248923

--- Comment #2 from Ed Maste <emaste@freebsd.org> ---
As far as I can tell your example functions as expected: you cannot connect
with keys in .ssh/authorized_keys2, and can with keys in .ssh/authorized_ke=
ys.

Again, from sshd(8):

>     AuthorizedKeysFile specifies the files containing public keys for pub=
lic
>     key authentication; if this option is not specified, the default is
>     ~/.ssh/authorized_keys and ~/.ssh/authorized_keys2.

But the option *is* specified in the default /etc/sshd_config file:

# The default is to check both .ssh/authorized_keys and .ssh/authorized_key=
s2
# but this is overridden so installations will only check .ssh/authorized_k=
eys
AuthorizedKeysFile      .ssh/authorized_keys

If have no AuthorizedKeysFile setting in your sshd configuration the
compiled-in default is ~/.ssh/authorized_keys and ~/.ssh/authorized_keys2. =
If
you *do* have an AuthorizedKeysFile in your sshd configuration
(/etc/ssh/sshd_config) that takes precedence over the default compiled into
sshd.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-248923-227-du7i0UA8rU>