Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ncm-ssh: /software/components/ssh/daemon/comment_options/GSSAPIKexAlgorithms = "" ends up adding a new line on each ncm-ssh run #1666

Open
ulrich1919 opened this issue Mar 4, 2024 · 3 comments
Labels
Milestone

Comments

@ulrich1919
Copy link
Contributor

if I specify:
/software/components/ssh/daemon/comment_options/GSSAPIKexAlgorithms = "" (empty value)
then ncm-ssh adds
"#GSSAPIKexAlgorithms" line to sshd_config on each run, and restarts sshd. I believe this behaviour is not normal. Please check and fix. Thanks

  • The version of the component you are using (rpm -q $component) ncm-ssh-23.6.0-1.noarch
  • What OS version you are using (/etc/redhat-release or similar) Red Hat Enterprise Linux Server release 7.9 (Maipo)
  • Steps required to reproduce the problem: see above
  • Actual result versus expected result.
    Expected result:
    It should comment out any GSSAPIKexAlgorithms options with any values from sshd_config and restart sshd.
    It should not add #GSSAPIKexAlgorithms lines on each run.
    Of course this affects any sshd option, not particularly just GSSAPIKexAlgorithms. It probably affects other ncm components as well(CAF::FileEditor::add_or_replace_lines)
@jrha jrha added the bug label Mar 8, 2024
@jrha jrha added this to the 24.3 milestone Mar 8, 2024
@jrha
Copy link
Member

jrha commented Sep 11, 2024

Apologies for the delay, I tried to reproduce this today, but GSSAPIKexAlgorithms isn't a valid option in the schema, are you using a local fork?

I can however replicate the same behaviour with:

"/software/components/ssh/daemon/comment_options/Protocol" = "";

It appears to happen when an option is present in both options and comment_options and the comment version has no associated value.

@ulrich1919
Copy link
Contributor Author

Yes, we added GSSAPIKexAlgorithms to our schema. Forgot to raise a PR here. Will do now.
I think GSSAPIKexalgorithms was only present in comment_options with an empty value. It was not added to options.
Can you reproduce the behaviour If an option is only present in comment_options(and not present in options)?

@ulrich1919
Copy link
Contributor Author

raised #1714

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

2 participants