[Bug 1302812] [NEW] Explicit identity files are being used after implicit files are attempted

[Michael Hall]

Public bug reported:

When explicitly setting an identity, either via the -i commandline
parameter or IdentityFile in the ssh config, these files are used only
after any other identity files found in ~/.ssh/ have failed pubkey
authentication.

When the remote host limits the number of pubkey authentication failures
before disconnecting, this can lead to a situation where the explicit
identity file is not even used when connecting to that host.

** Affects: openssh
     Importance: Unknown
         Status: Unknown

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

** Bug watch added: OpenSSH Portable Bugzilla #2221
   https://bugzilla.mindrot.org/show_bug.cgi?id=2221

** Also affects: openssh via
   https://bugzilla.mindrot.org/show_bug.cgi?id=2221
   Importance: Unknown
       Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1302812

Title:
  Explicit identity files are being used after implicit files are
  attempted

Status in Portable OpenSSH:
  Unknown
Status in “openssh” package in Ubuntu:
  New

Bug description:
  When explicitly setting an identity, either via the -i commandline
  parameter or IdentityFile in the ssh config, these files are used only
  after any other identity files found in ~/.ssh/ have failed pubkey
  authentication.

  When the remote host limits the number of pubkey authentication
  failures before disconnecting, this can lead to a situation where the
  explicit identity file is not even used when connecting to that host.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openssh/+bug/1302812/+subscriptions