https://bugzilla.mindrot.org/show_bug.cgi?id=3080
Bug ID: 3080
Summary: Document IdentityFile=none and clarify interaction of
defaults with IdentitiesOnly
Product: Portable OpenSSH
Version: 8.0p1
Hardware: Other
OS: All
Status: NEW
Severity: normal
Priority: P5
Component: Documentation
Assignee: [email protected]
Reporter: [email protected]
Currently the documentation for IdentitiesOnly states:
"Specifies that ssh(1) should only use the authentication identity and
certificate files explicitly configured in the ssh_config files or
passed on the ssh(1) command-line..."
This is inaccurate, as with no IdentityFile configuration in
/etc/ssh/ssh_config or ~/.ssh/config, the *default* IdentityFile value
(documented but not *explicitly configured* is used when IdentitiesOnly
is set.
This is compounded by the fact that the mechanism for setting
IdentityFile to empty (using the special "none" string) is not
documented (see https://bugzilla.mindrot.org/show_bug.cgi?id=2362).
I suggest the following fixes:
* Update the IdentityFile documentation to mention the "none" string.
* Change the IdentitiesOnly documentation to say that it will use the
*default* IdentityFile configuration if that parameter is not
explicitly configured (and draw specific attention to this, as it's
unlikely to be what the user wants if they specify IdentitiesOnly - I
suggest recommending the above IdentityFile setting).
--
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
