[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#671367: sshd config file upgrade can be done with cme


There's a possibility to upgrade old sshd_config files to new format with a 
single command. Once you've install libconfig-model-openssh-perl, you will be 
able to use cme and openssh model to migrate old files.

Here's an example:

 $ sudo cme migrate sshd
 Element 'AuthorizedKeysFile2' of node 'Sshd' is deprecated

 - AuthorizedKeysFile:1: '' -> '/var/lib/misc/userkeys2/%u'

and here's the resulting change (done on a very simple test case):

$ diff -u test-debian-671367/etc/ssh/sshd_config test-debian-671367-
--- test-debian-671367/etc/ssh/sshd_config      2012-06-02 11:35:57.216842255 
+++ test-debian-671367-w/etc/ssh/sshd_config    2012-06-01 19:37:22.656879969 
@@ -7,8 +7,4 @@
 # See the sshd_config(5) manpage for details
 # now a list
-AuthorizedKeysFile /etc/ssh/userkeys/%u
-# used to work on wheezy
-AuthorizedKeysFile2 /var/lib/misc/userkeys2/%u
+AuthorizedKeysFile   /etc/ssh/userkeys/%u /var/lib/misc/userkeys2/%u

Is this what you need ?

To be sure that this solution is working correcly, I'd need one or 2 sample of 
your sshd_config files (minus any sensitive information, of course)


https://github.com/dod38fr/config-model/ -o- http://search.cpan.org/~ddumont/
    http://ddumont.wordpress.com/        -o-   irc: dod at irc.debian.org

Reply to: