This bug was fixed in the package openssh - 1:7.2p2-4ubuntu2.5
---
openssh (1:7.2p2-4ubuntu2.5) xenial; urgency=medium
* debian/systemd/ssh.service: Test configuration before starting or
reloading sshd (LP: #1771340)
-- Karl Stenerud Tue, 21 Aug 2018
10:45:26 -0700
**
Thanks for the confirmation @tronde, much appreciated.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
Title:
sshd failed on config reload
Status in openssh
@ahasenack, of course I could double check. I've done so a few minutes
ago and you are right. After trying to reload with a corrupted config
file the reload failed but the service is still up and running.
Please see the following output for confirmation:
~~~
root@vbox-xenial:~# systemctl status
@tronde, I just tried and the fix worked for me.
With the proposed package:
root@xenial-ssh-reload:~# ps fxaw
PID TTY STAT TIME COMMAND
1 ?Ss 0:02 /sbin/init
55 ?Ss 0:00 /lib/systemd/systemd-journald
...
2443 ?Ss 0:00 /usr/sbin/sshd -D
Note
** Changed in: openssh (Ubuntu Xenial)
Assignee: Karl Stenerud (kstenerud) => Andreas Hasenack (ahasenack)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
Hi there,
I tested version 1:7.2p2-4ubuntu2.5 from proposed but the issue still
exists. Behavior is exactly as before.
Regards,
Tronde
** Tags removed: verification-needed-xenial
** Tags added: verification-failed-xenial
--
You received this bug notification because you are a member of
** Changed in: openssh (Debian)
Status: Unknown => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
Title:
sshd failed on config reload
Status
Hello Tronde, or anyone else affected,
Accepted openssh into xenial-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/openssh/1:7.2p2-4ubuntu2.5 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
Sure, the commit is here:
https://git.launchpad.net/ubuntu/+source/openssh/commit/?h=ubuntu/bionic=7f06034b1c4ba72dac028ed7879c89b6ee073293
Specifically, this:
https://git.launchpad.net/ubuntu/+source/openssh/diff/debian/systemd/ssh.service?h=ubuntu/bionic=7f06034b1c4ba72dac028ed7879c89b6ee073293
Could you provide links indicating that this is fixed in both Ubuntu
18.10 and Ubuntu 18.04? Thanks in advance.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
marking as fix released in the devel task, since the fix is in cosmic.
** Changed in: openssh (Ubuntu)
Status: Triaged => Fix Released
** Changed in: openssh (Ubuntu)
Assignee: Karl (kstenerud) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
** Description changed:
[Impact]
sshd doesn't check the configuration when reloading.
If a user generates an invalid configuration file, sshd will shut down
and not come back up when the user issues a reload.
[Test Case]
-
- Copied existing debian fix from
** Changed in: openssh (Ubuntu Xenial)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
Title:
sshd failed on config reload
Status
** Changed in: openssh (Ubuntu Xenial)
Status: New => In Progress
** Changed in: openssh (Ubuntu Xenial)
Assignee: (unassigned) => Karl (kstenerud)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in
** Also affects: openssh (Ubuntu Xenial)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
Title:
sshd failed on config
** Description changed:
+ [Impact]
+
+ sshd doesn't check the configuration when reloading.
+
+ If a user generates an invalid configuration file, sshd will shut down
+ and not come back up when the user issues a reload.
+
+
+ [Test Case]
+
+ Copied existing debian fix from
** Merge proposal linked:
https://code.launchpad.net/~kstenerud/ubuntu/+source/openssh/+git/openssh/+merge/353531
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
** Changed in: openssh (Ubuntu)
Assignee: (unassigned) => Karl (kstenerud)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1771340
Title:
sshd failed on config reload
The issue is reload, not restart.
You should:
- get a working normal sshd_config
- issue reload, confirm it works
- add an invalid option to sshd_config
- issue reload
The broken system will kill sshd, whereas the fixed one will refuse to
reload but sshd will still be running.
--
You received
I can confirm this is working in Xenial. After change the sshd_config
config and execute a systemctl restart it worked. The ssh.service file
have only one ExecReload clause:
...
[Service]
EnvironmentFile=-/etc/default/ssh
ExecStart=/usr/sbin/sshd -D $SSHD_OPTS
ExecReload=/bin/kill -HUP $MAINPID
Confirmed fixed in >= artful. We have two ExecReload items under [Service]:
[Service]
...
ExecReload=/usr/sbin/sshd -t
ExecReload=/bin/kill -HUP $MAINPID
** Tags added: bitesize
** Changed in: openssh (Ubuntu)
Status: New => Triaged
** Changed in: openssh (Ubuntu)
Importance:
This bug seems to be fixed upstream in a newer version: [Debian Bug report logs
- #865770
openssh-server fails to validate configuration before reloading, under
systemd](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865770)
Maybe it is possible to get a version update in Xenial?!
** Bug
22 matches
Mail list logo
