[openssh-commits] [openssh] 03/03: Match version instead of groups in connect-bigconf

git+noreply at mindrot.org git+noreply at mindrot.org
Mon Aug 18 16:50:10 AEST 2025


This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch master
in repository openssh.

commit 5e9ca80fe65e407428dc46ed45804724d08b91b7
Author: Damien Miller <djm at mindrot.org>
AuthorDate: Mon Aug 18 16:47:23 2025 +1000

    Match version instead of groups in connect-bigconf
    
    The connect-bigconf makes a giant config file to test config passing
    between the sshd subprocesses. Previously it used a bunch of "Match
    group" lines to construct a large file. However checking group
    membership can be expensive (e.g. if a large groups database is
    present or if group lookup is remote via NSS). This could be slow
    enough to exceed LoginGraceTime.
    
    This switches it to "Match version" which is just a string compare
    and does just as well for making a giant nonsense config file.
---
 regress/connect-bigconf.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/regress/connect-bigconf.sh b/regress/connect-bigconf.sh
index 56cf0ea64..ca2c11918 100644
--- a/regress/connect-bigconf.sh
+++ b/regress/connect-bigconf.sh
@@ -4,7 +4,7 @@
 tid="simple connect"
 
 for x in `jot 10000 1` ; do
-	echo "Match group NONEXIST" >> $OBJ/sshd_config
+	echo "Match version NONEXIST" >> $OBJ/sshd_config
 	echo "ChrootDirectory /some/path/for/group/NONEXIST" >> $OBJ/sshd_config
 done
 #cat $OBJ/sshd_config

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.


More information about the openssh-commits mailing list