Re: openssh 4.3p2 and Match keyword



Thanks, I realized this after I had done more digging. I have downloaded
from cvs the 4.4p1 release, the configure went fine, the make finished
with no problems, but make install failed on scard, no rule for install.
I commented out everything in the scard/Makefile under install, and it
then finished and now I have it running. I have been doing this on a
opteron mb running Ubuntu-x86_64. Please forgive me if I seem
particularly dense, but the whole reason for doing this is to deny a
group of users from ssh'ing into the server from the internet, but allow
them to do this from the local net. I was hoping to do the following:
Match Group untrusted
RequiredAuthentication deny
but I get a: Directive 'RequiredAuthentication' not allowed within a
Match block.
So how can I do this?

Thanks for your help
Ross

On Fri, 2006-22-09 at 09:08 +1000, Darren Tucker wrote:
Ross Marshall wrote:
I have included the following in the config file:
Match Address 192.168.1.10
AllowTcpForwarding yes
GatewayPorts no
and when I try to start openssh, I get:
/opt/etc/ssh/sshd_config: line 80: Bad configuration option: Match
/opt/etc/ssh/sshd_config: terminating, 1 bad configuration options
did I miss something when I compiled the server, or am I doing a
mis-configuration?

Match was added after the 4.3p2 release so it's not in the version you have.

There's a patch for 4.3p2 here:
http://bugzilla.mindrot.org/show_bug.cgi?id=1180 (you want attachment
#1127).

It's already in the snapshots, and the 4.4 release will be happening
some time in the very near future.




Relevant Pages

  • Re: SSH and cvs
    ... > Do I need to install a cvs server on the box to run a cvs server? ... legal statement: http://www.uni-x.org/legal.html Fedora GNU/Linux Core 2 on Athlon kernel 2.6.9-1.6_FC2smp ...
    (Fedora)
  • Re: CVS system for D7
    ... Best is if you have an own server where you can install a CMS. ... is extremly simple to install and with the Tortoise client also very easy ... They are using CVS AFAIK. ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: New Event Log Errors!
    ... Somehow along those lines I'd also installed the Certificate Authority ... Did you apply the last Server Pack for SBS Server? ... Please install Windows Support Tools on the win2k3 sp1 problematic ... Microsoft is providing this information only as a convenience to you: ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot activate SBS 2003 SP2
    ... everywhere and sitting on the case of the server is the old board - balanced ... slip stream SBS you would have had it ages ago. ... My main reason for slipstreaming the install is because I cannot get ... updates that need to be applied if one is to have a succesful outcome ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot activate SBS 2003 SP2
    ... everywhere and sitting on the case of the server is the old board - balanced ... slip stream SBS you would have had it ages ago. ... My main reason for slipstreaming the install is because I cannot get ... updates that need to be applied if one is to have a succesful outcome ...
    (microsoft.public.windows.server.sbs)