This bug was fixed in the package openssh - 1:8.2p1-4ubuntu0.7
---
openssh (1:8.2p1-4ubuntu0.7) focal; urgency=medium
* d/p/lp2012298-upstream-fix-match-in-d-config.patch: Allow ssh_config.d/
configuration files to correctly update the PasswordAuthentication setting
(LP:
Thanks Lena!
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/2012298
Title:
PasswordAuthenticaion in sshd_config.d
Status in portable OpenSSH:
Unknown
Status in openssh
Here's the result of me running through the test with the new version:
$ lxc launch images:ubuntu/focal test-ssh-focal
$ lxc exec test-ssh-focal bash
# cat
Please could someone verify that with openssh-server 1:8.2p1-4ubuntu0.7
installed in its default configuration, ssh works as expected? If you
could detail the exact steps you performed to verify this and copy and
paste the output of eg. "dpkg -l|grep openssh" so there is no doubt as
to what was
Do we have an estimate for when this will go mainline?
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/2012298
Title:
PasswordAuthenticaion in sshd_config.d
Status in
** Tags removed: verification-needed
** Tags added: verification-done
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/2012298
Title:
PasswordAuthenticaion in sshd_config.d
Tested openssh-server/focal-proposed,now 1:8.2p1-4ubuntu0.7 amd64
[installed]
creating /etc/ssh/sshd_config.d/.conf:
Match User
PasswordAuthentication No
worked as expected: prohibited password login while allow publickey
authentication
** Tags removed: verification-needed-focal
** Tags
Hello Gerard, or anyone else affected,
Accepted openssh into focal-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/openssh/1:8.2p1-4ubuntu0.7 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
** Description changed:
[Impact]
When using the "Match" phrase in sshd_config.d files, the configuration
does not apply. This leads to failures in user-specific configurations
such as with PasswordAuthentication.
The fix for this issue should be added to Focal to allow users to
** Merge proposal linked:
https://code.launchpad.net/~lvoytek/ubuntu/+source/openssh/+git/openssh/+merge/440279
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/2012298
** Description changed:
+ [Impact]
+
+ When using the "Match" phrase in sshd_config.d files, the configuration
+ does not apply. This leads to failures in user-specific configurations
+ such as with PasswordAuthentication.
+
+ The fix for this issue should be added to Focal to allow users to
Thanks for the confirmation Gerard. This fix won't be marked as a
security update, but should show up in the mainline Ubuntu focal-updates
repository soon once its uploaded and accepted. I don't have an exact
eta, but it should happen within the next week or two.
--
You received this bug
I'm not familiar with the Ubuntu update timeline -- is there an ETA for
when we will see this in the mainline repository?
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
@lvoytek
PPA works as expected, thank you.
For completeness, I'll note the affected packages appear to be:
sudo apt-get install -y openssh-client openssh-server openssh-sftp-
server
(We manage our systems such that we don't apply non-security updates
during system lifecycle so our users have a
Thanks for finding the commit Paride. I ported it to Focal in a PPA
here: https://launchpad.net/~lvoytek/+archive/ubuntu/openssh-fix-
passwordauthentication-config
After testing I can confirm this worked for me, if you would like to
test it though you can run the following commands:
sudo
I think I found a relevant upstream bug [0], fixed by [1]. If the patch
applies fairly cleanly to the version in Focal this could be good SRU
material.
[0] https://bugzilla.mindrot.org/show_bug.cgi?id=3122
[1]
I don't think it's a duplicate of 2002994.
I tried moving the Include line in the main sshd_config to the end of
the file and the behavior was unaffected.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
FYI: might be related (or even dup) of bug 2002994
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/2012298
Title:
PasswordAuthenticaion in sshd_config.d
Status in openssh
Thanks for the update! I managed to reproduce this on my end:
$ lxc launch images:ubuntu/focal test-ssh-focal
$ lxc exec test-ssh-focal bash
# apt update && apt upgrade -y
# apt install openssh-server
# adduser user
> ssh into container from another terminal to show pw auth is available
by
Failing sshd_config
** Attachment added: "fail"
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2012298/+attachment/5656819/+files/fail
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to openssh in Ubuntu.
working sshd_config with Match block inline.
** Attachment added: "work"
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2012298/+attachment/5656821/+files/work
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to
sshd_config.d file that doesn't work
** Attachment added: "cweatherby.conf"
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2012298/+attachment/5656820/+files/cweatherby.conf
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is
Thanks for taking the time to report this bug and trying to make Ubuntu
better.
Could you please share your config files (anonymizing any necessary
data)? The config file might be loaded but depending on the ordering and
the content inside the config files the option you are setting can be
23 matches
Mail list logo
