Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix sshd config validation when Match statements are used on OpenSSH 7 #68

Closed
wants to merge 1 commit into from
Closed

Conversation

mig5
Copy link

@mig5 mig5 commented Oct 28, 2020

I have a statement like this in my sshd_config on OpenSSH 7.9 (Debian Buster):

Match Group foobar
    PasswordAuthentication yes
    ChrootDirectory %h/ftp_access
    X11Forwarding no
    AllowTcpForwarding yes
    ForceCommand internal-sftp

This Ansible role was failing to execute with this error:

| msg: failed to validate: rc:255 error:'Match Group' in configuration but 'user' not in connection test specification.

I found the same issue in another Ansible role:

dev-sec/ansible-ssh-hardening#188

and its associated PR fix:

dev-sec/ansible-ssh-hardening#202

The same fix in your role seems to work for me, so here's a PR for it!

@stale
Copy link

stale bot commented Jan 26, 2021

This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark pull requests as stale.

@stale stale bot added the stale label Jan 26, 2021
@stale
Copy link

stale bot commented Feb 26, 2021

This pull request has been closed due to inactivity. If you feel this is in error, please reopen the pull request or file a new PR with the relevant details.

@stale stale bot closed this Feb 26, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant