[Bug 1885990] Re: server: Match has no effect in include file (upstream 3122)

[Jernej Jakob]

Why is this marked as "fix released"? It's still broken on Ubuntu 20.04 LTS, the fix has not been released into it.
At the very least, the behavior does not match what is described in the sshd_config man page. Nowhere does it mention that Match blocks don't work inside Include files. Not only that, the config passes config test, and a LogLevel VERBOSE will say that the Match section has been processed, but then it has really been silently ignored!

It took me hours to debug this issue back to a post on the mailing list,
to the upstream fix, to this bug report.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1885990

Title:
  server: Match has no effect in include file (upstream 3122)

Status in portable OpenSSH:
  Unknown
Status in openssh package in Ubuntu:
  Fix Released

Bug description:
  Hello

  Ubuntu version: focal 20.04 LTS
  Version:
  openssh-server:
    Installed: 1:8.2p1-4ubuntu0.1
    Candidate: 1:8.2p1-4ubuntu0.1
  Expected: match statement in included files work as documented in the fine manual
  What happens: the statements are ignored.

  
  If you add Match statements in an included file, it will generate no error but have no effect.
  The exact same statements work in the main server config file (/etc/ssh/sshd_config)

  this is to track upstream bug 3122:

  https://bugzilla.mindrot.org/show_bug.cgi?id=3122

  it's fixed but will only be in 8.4 so it affects Ubuntu 20.04 LTS
  where openssh is at 8.2.

  I'm not *absolutely* whining for a backport since include files is a
  new feature for openssl in focal so it's not a regression. Would be
  nice though :),  because include files are standard for any server
  software in Linux since at least a decade...

To manage notifications about this bug go to:
https://bugs.launchpad.net/openssh/+bug/1885990/+subscriptions