[Bug 2031942] Re: AuthorizedPrincipalsCommand is ignored if AuthorizedKeysCommand is set

[Michał Małoszewski]

Hi, I assigned myself to the bug and I will deal with it :)

** Changed in: openssh (Ubuntu Jammy)
     Assignee: (unassigned) => Michał Małoszewski (michal-maloszewski99)

** Changed in: openssh (Ubuntu Lunar)
     Assignee: (unassigned) => Michał Małoszewski (michal-maloszewski99)

** Changed in: openssh (Ubuntu Mantic)
     Assignee: (unassigned) => Michał Małoszewski (michal-maloszewski99)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/2031942

Title:
  AuthorizedPrincipalsCommand is ignored if AuthorizedKeysCommand is set

Status in openssh package in Ubuntu:
  Triaged
Status in openssh source package in Jammy:
  New
Status in openssh source package in Lunar:
  New
Status in openssh source package in Mantic:
  Triaged

Bug description:
  Versions of OpenSSH from 8.7p1 to 9.3p1 contain the following code:

                  if (*activep && options->authorized_keys_command == NULL)
                          *charptr = xstrdup(str + len);

  However, this is executed for both authorized_keys_command and
  authorized_principals_command. As a result, if authorized_keys_command
  is set (for instance, if using ec2-instance-connect), any
  AuthorizedPrincipalsCommand configuration in sshd_config is ignored.
  This is fixed in 9.4p1 with the attached patch.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2031942/+subscriptions