OpenSSH/Pattern Matching in OpenSSH Configuration

From Wikibooks, open books for an open world
< OpenSSH
Jump to: navigation, search

A pattern consists of zero or more non-whitespace characters. An asterisk (*) matches zero or more characters in a row, and a question mark (?) matches exactly one character. For example, to specify a set of declarations that apply to any host in the "" set of domains in ssh_config, the following pattern could be used:

Host *

The following pattern would match any host in the - range:

Host 192.168.0.?

A pattern-list is a comma-separated list of patterns. The following list of patterns match hosts in the "" or "" domains.

Host *, *

Individual patterns by themselves or as part of a pattern-lists may be negated by preceding them with an exclamation mark (!). The following will match any host from except for gamma.

Host * !

For example, to allow a key to be used from anywhere within an organisation except from the dialup pool, the following entry in authorized_keys could be used:


See also glob(7)