- markus@cvs.openbsd.org 2001/03/18 12:07:52

     [auth-options.c]
     ignore permitopen="host:port" if AllowTcpForwarding==no

1 files changed, 3 insertions, 2 deletions

diff --git a/auth-options.c b/auth-options.c
index 7ce1e4b0c..443f5414a 100644
--- a/auth-options.c
+++ b/auth-options.c
@@ -10,7 +10,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: auth-options.c,v 1.15 2001/03/16 19:06:28 markus Exp $");
+RCSID("$OpenBSD: auth-options.c,v 1.16 2001/03/18 12:07:52 markus Exp $");
 
 #include "packet.h"
 #include "xmalloc.h"
@@ -268,7 +268,8 @@ auth_parse_options(struct passwd *pw, char *opts, char *file, u_long linenum)
                                 xfree(patterns);
                                 goto bad_option;
                         }
-                        channel_add_permitted_opens(patterns, port);
+                        if (options.allow_tcp_forwarding)
+                                channel_add_permitted_opens(patterns, port);
                         xfree(patterns);
                         goto next_option;
                 }