Re: Pattern specification trouble

László Monda wrote:
Hi List,

`man ssh' says:

----8<----

A pattern-list is a comma-separated list of patterns. Patterns within
pattern-lists may be negated by preceding them with an exclamation mark
(‘!’). For example, to allow a key to be used from anywhere within an
organisation except from the “dialup” pool, the following entry (in
authorized_keys) could be used:

from="!*.dialup.example.com,*.example.com"

----8<----

It is confusing to me because it specifies pattern syntax in the context
of authorized_keys. I want to use patterns with the Host directive in
~/.ssh/config

I've tried to use the following directives with no success:

Host "wondeer.com,*.wondeer.com"
Host wondeer.com,*.wondeer.com
Host from="wondeer.com,*.wondeer.com"

How should I use the damn thing?

Separate them with spaces:
Host wondeer.com *.wondeer.com

The man page should be clearer.

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages

  • Re: Pattern specification trouble
    ... for the Host declaration in .ssh/config you would need to check `man ssh_config`. ... ~/.ssh/config and private keys are for the ssh client configuration. ... A pattern-list is a comma-separated list of patterns. ...
    (SSH)
  • Re: restricted users
    ... This keyword can be followed by a list of user name patterns, ... used as wildcards in the patterns. ... By default, login is ... If the pattern takes the form USER@HOST then USER and HOST are ...
    (SSH)
  • Re: BLOCK SSH FOR CERTAIN USERS
    ... This keyword can be followed by a list of user name patterns, ... login is allowed for all ... HOST are separately checked, restricting logins to particular ...
    (comp.unix.aix)
  • Re: How to deny on ssh
    ... (I've just re-checked it under AIX 5.1 and 5.2) ... user names that match one of the patterns. ... login is allowed for all users. ... pattern takes the form USER@HOST then USER and HOST are ...
    (comp.unix.aix)
  • Re: BLOCK SSH FOR CERTAIN USERS
    ... This keyword can be followed by a list of user name patterns, ... login is allowed for all ... HOST are separately checked, restricting logins to particular ...
    (comp.unix.aix)