[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1010606: marked as done (openssh-server: Include directive not present in sshd_config despite claimed version)



Your message dated Thu, 5 May 2022 12:59:26 +0100
with message-id <YnO8Hh8jctLE15GW@riva.ucam.org>
and subject line Re: Bug#1010606: openssh-server: Include directive not present in sshd_config despite claimed version
has caused the Debian Bug report #1010606,
regarding openssh-server: Include directive not present in sshd_config despite claimed version
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1010606: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010606
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: openssh-server
Version: 1:7.9p1-10+deb10u2
Severity: normal

Dear Maintainer,


I included an Include directive in my /etc/sshd_config and sshd said it was not
recognised. Indeed, the manual of the installed version does not mention it.
However, ssh -V says that version is 7.9p1 (consistent with apt list openssh-
server), and the release notes for version 7.3 of OpenSSH mention the addition
of the Include directive.

I would have expected version 7.9 to have it as well. Was it advertently
removed by Debian ?



-- System Information:
Debian Release: 10.12
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-20-amd64 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssh-server depends on:
ii  adduser                3.118
ii  debconf [debconf-2.0]  1.5.71+deb10u1
ii  dpkg                   1.19.7
ii  libaudit1              1:2.8.4-3
ii  libc6                  2.28-10+deb10u1
ii  libcom-err2            1.44.5-1+deb10u3
ii  libgssapi-krb5-2       1.17-3+deb10u3
ii  libkrb5-3              1.17-3+deb10u3
ii  libpam-modules         1.3.1-5
ii  libpam-runtime         1.3.1-5
ii  libpam0g               1.3.1-5
ii  libselinux1            2.8-1+b1
ii  libssl1.1              1.1.1n-0+deb10u1
ii  libsystemd0            241-7~deb10u8
ii  libwrap0               7.6.q-28
ii  lsb-base               10.2019051400
ii  openssh-client         1:7.9p1-10+deb10u2
ii  openssh-sftp-server    1:7.9p1-10+deb10u2
ii  procps                 2:3.3.15-2
ii  ucf                    3.0038+nmu1
ii  zlib1g                 1:1.2.11.dfsg-1+deb10u1

Versions of packages openssh-server recommends:
ii  libpam-systemd [logind]  241-7~deb10u8
ii  ncurses-term             6.1+20181013-2+deb10u2
ii  xauth                    1:1.0.10-1

Versions of packages openssh-server suggests:
pn  molly-guard   <none>
pn  monkeysphere  <none>
pn  rssh          <none>
pn  ssh-askpass   <none>
pn  ufw           <none>

-- debconf information excluded

--- End Message ---
--- Begin Message ---
On Thu, May 05, 2022 at 01:08:34PM +0200, Yann Salmon wrote:
> I included an Include directive in my /etc/sshd_config and sshd said it was not
> recognised. Indeed, the manual of the installed version does not mention it.
> However, ssh -V says that version is 7.9p1 (consistent with apt list openssh-
> server), and the release notes for version 7.3 of OpenSSH mention the addition
> of the Include directive.
> 
> I would have expected version 7.9 to have it as well. Was it advertently
> removed by Debian ?

You've misread the release notes.  7.3 added an Include keyword for
ssh_config (client); a similar keyword was only added to sshd_config
(server) in 8.2.  OpenSSH 8.4 is available in buster-backports if you
aren't able to upgrade to Debian 11 (bullseye).

-- 
Colin Watson (he/him)                              [cjwatson@debian.org]

--- End Message ---

Reply to: