lucid and squeeze broke with debathena-ssh-client-config

[jweiss]

peter-petrelli:~: ssh -l root tla
/etc/ssh/ssh_config line 52: garbage at end of line; "/etc/ssh/ssh_known_hosts2".
Exit 255

peter-petrelli:~: tail -1 /etc/ssh/ssh_config

GlobalKnownHostsFile? /etc/ssh/ssh_known_hosts /etc/ssh/ssh_known_hosts2 /etc/ssh/ssh_known_hosts.debathena

peter-petrelli:~: ls -l /etc/ssh/ssh_known_hosts /etc/ssh/ssh_known_hosts2 /etc/ssh/ssh_known_hosts.debathena
ls: cannot access /etc/ssh/ssh_known_hosts: No such file or directory
ls: cannot access /etc/ssh/ssh_known_hosts2: No such file or directory
-rw-r--r-- 1 root root 4421 2014-02-04 00:45 /etc/ssh/ssh_known_hosts.debathena
Exit 2

[jdreed]

I cannot reproduce this on precise, though I'll note that in my ssh_config has that line at line 53, not 52. Is this precise, or something else? Can you put your entire /etc/ssh/ssh_config somewhere, and also confirm that it is symlinked to /etc/ssh/ssh_config.debathena, and run "debsums -a debathena-ssh-client-config"?

[jweiss]

This is Lucid.

peter-petrelli:~$ ls -l /etc/ssh/ssh_config
lrwxrwxrwx 1 root root 20 2011-03-18 14:37 /etc/ssh/ssh_config -> ssh_config.debathena
root@peter-petrelli:~# debsums -a debathena-ssh-client-config
/usr/share/doc/debathena-ssh-client-config/changelog.gz OK
/usr/share/doc/debathena-ssh-client-config/copyright OK
/etc/ssh/ssh_known_hosts.debathena OK
/etc/ssh/ssh_config.debathena OK

Actually, comparing the Precise ssh_config manpage:

GlobalKnownHostsFile?

Specifies one or more files to use for the global host key data‐
base, separated by whitespace. The default is
/etc/ssh/ssh_known_hosts, /etc/ssh/ssh_known_hosts2.

with the Lucid manpage

GlobalKnownHostsFile?

Specifies a file to use for the global host key database instead
of /etc/ssh/ssh_known_hosts.

Highlights the problem.

Indeed, removing all but one file from this line on my Lucid machine fixes this.

[jdreed]

Yeah, the ability to specify multiple GlobalKnownHosts? files was added in May 2011. I'll rebuild the previous release and push it out for lucid and squeeze users.

[jdreed]

Jonathon, can you please take the version in -development and let me know if this fixes your problem.

[jweiss]

Replying to jdreed:

Jonathon, can you please take the version in -development and let me know if this fixes your problem.

Sure, though I can't promise how quickly. Also, can you give me some quick instructions for how to do this?

[jdreed]

Since this is actively biting users, I've tested it and will push to proposed. On Lucid, ssh works again, and on Precise, I still get KeyEx? disabled, but also get the debathena known_hosts.