[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#456672: openssh-server: authorized_keys from= doesn't loop around hostnames



Package: openssh-server
Version: 1:4.3p2-9.1

I used the authorized_keys "from=" option to restrict access, and get
the following:

|Dec 17 03:55:03 moe sshd[13282]: Authentication tried for backup with
|correct key but not from a permitted host (host=smtp.quoininc.com,
|ip=64.191.84.165).

The machine in question has multiple PTR records:
165.84.191.64.in-addr.arpa domain name pointer smtp.quoininc.com.
165.84.191.64.in-addr.arpa domain name pointer domain.quoininc.com.
165.84.191.64.in-addr.arpa domain name pointer nyuk.quoininc.com.

So the connection fails 2/3 times.  I think openssh should loop around
all the hostnames/aliasen and fail only if a string comparison fails
every time.



Reply to: