[openssh-commits] [openssh] 03/03: Match version instead of groups in connect-bigconf
git+noreply at mindrot.org
git+noreply at mindrot.org
Mon Aug 18 16:50:10 AEST 2025
This is an automated email from the git hooks/post-receive script.
djm pushed a commit to branch master
in repository openssh.
commit 5e9ca80fe65e407428dc46ed45804724d08b91b7
Author: Damien Miller <djm at mindrot.org>
AuthorDate: Mon Aug 18 16:47:23 2025 +1000
Match version instead of groups in connect-bigconf
The connect-bigconf makes a giant config file to test config passing
between the sshd subprocesses. Previously it used a bunch of "Match
group" lines to construct a large file. However checking group
membership can be expensive (e.g. if a large groups database is
present or if group lookup is remote via NSS). This could be slow
enough to exceed LoginGraceTime.
This switches it to "Match version" which is just a string compare
and does just as well for making a giant nonsense config file.
---
regress/connect-bigconf.sh | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/regress/connect-bigconf.sh b/regress/connect-bigconf.sh
index 56cf0ea64..ca2c11918 100644
--- a/regress/connect-bigconf.sh
+++ b/regress/connect-bigconf.sh
@@ -4,7 +4,7 @@
tid="simple connect"
for x in `jot 10000 1` ; do
- echo "Match group NONEXIST" >> $OBJ/sshd_config
+ echo "Match version NONEXIST" >> $OBJ/sshd_config
echo "ChrootDirectory /some/path/for/group/NONEXIST" >> $OBJ/sshd_config
done
#cat $OBJ/sshd_config
--
To stop receiving notification emails like this one, please contact
djm at mindrot.org.
More information about the openssh-commits
mailing list