It was brought to my attention that the "MaxAuthTries" keyword is not currently supported in sshd_config file for SunSSH and the "KbdInteractiveAuthentication" keyword is deprecated. Therefore, these two keywords will be removed from the Match supported list in the new sshd_config man page. The updated sshd_config.man page files are attached here.
Regards, Huie-Ying On 10/06/09 10:31, Huie-Ying Lee wrote: > On 10/06/09 07:42, Garrett D'Amore wrote: >> +1 with one minor man page nit. I think in your sshd_config.man, you >> should add ("!") after the sentence that ends "and negation >> operators." (Basically, you list the actual operators for wild >> cards, so you should be uniform and do so for negation as well.) >> >> - Garrett >> > Good point. The sshd_config.man files are updated and attached here. > > Thanks, > Huie-Ying > > >> Wyllys Ingersoll wrote: >>> Template Version: @(#)sac_nextcase 1.68 02/23/09 SMI >>> This information is Copyright 2009 Sun Microsystems >>> 1. Introduction >>> 1.1. Project/Component Working Name: >>> sshd match block option >>> 1.2. Name of Document Author/Supplier: >>> Author: HuieYing Lee >>> 1.3 Date of This Document: >>> 06 October, 2009 >>> 4. Technical Description >>> 1. Introduction >>> >>> 1.1. Project/Component Working Name: >>> >>> The Match conditional block option for SunSSH server >>> 1.2. Name of Document Author/Supplier: >>> >>> HuieYing Lee >>> 1.3. Date of This Document: >>> >>> Oct 05 2009 >>> >>> 4. Technical Description: >>> >>> The goal of this project is to implement the Match conditional block >>> feature according to how OpenSSH implemented it in the 5.2p1 version >>> (released 2009-02-22). This feature enables a customer to specify >>> SSH server configuration options based on user, group, hostname, or >>> address. >>> >>> This project introduces a Match conditional block in the >>> sshd_config file, >>> the SunSSH server configuration file. If all of the criteria on >>> the Match >>> line are satisfied, the keywords on the following lines override >>> those >>> set in the global section of the configuration file, until either >>> another >>> Match line or the end of the file. >>> >>> The pertinent SunSSH OpenCR's are: >>> 6655613 resync server's conditional Match block from OpenSSH >>> 6871707 need new tests for ssh server's conditonal Match block >>> feature >>> after putback of CR6655613 >>> 6881438 sshd_config(4) man page needs to be updated after >>> putback of >>> CR6655613 >>> 6885011 ssh section in the system admin guide needs to be >>> updated after >>> putback of CR6655613 >>> >>> Attached are the sshd_config file and man page changes. >>> (see PSARC case materials directory) >>> >>> 6. Resources and Schedule >>> 6.4. Steering Committee requested information >>> 6.4.1. Consolidation C-team Name: >>> ON >>> 6.5. ARC review type: FastTrack >>> 6.6. ARC Exposure: open >>> >>> >> -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: sshd_config.man.diff URL: <http://mail.opensolaris.org/pipermail/opensolaris-arc/attachments/20091106/5deed2c2/attachment-0002.ksh> -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: sshd_config.man.new URL: <http://mail.opensolaris.org/pipermail/opensolaris-arc/attachments/20091106/5deed2c2/attachment-0003.ksh>