#791638 openssh-server: Comment lines breaking configuration; 'match user' block being broken by comment lines

Package:
openssh-server
Source:
openssh
Description:
secure shell (SSH) server, for secure access from remote machines
Submitter:
Jesse Molina
Date:
2015-07-07 02:39:03 UTC
Severity:
normal
#791638#5
Date:
2015-07-07 01:47:38 UTC
From:
To:
Since yesterday I have been experimenting with strange sshd_config behavior. After testing extensively, I believe that comment lines are somehow breaking my configuration.

My sshd_config is below:

#791638#10
Date:
2015-07-07 02:12:00 UTC
From:
To:
Just to be clear, user "baduser" is in group "users".

I'm still testing. I'm not sure that this is a comment issue so much as
the interpreter is just breaking due to something else. It seems to die
after the "GatewayPorts no" line. Any additional configuration lines
seem to cause the client to not authneticate. Debug output shows
nothing; it just stops reading the config at that line.

There is something wrong, but I am not sure what it is.

#791638#15
Date:
2015-07-07 02:35:03 UTC
From:
To:
Now this is weird and interesting...

If I change the "AllowGroups root users" line to "AllowGroups root users
baduser", everything works as expected.

Note that user baduser is in both groups baduser and users.