PerSourcePenalties and ssh-copy-id

Dmitry Belyavskiy dbelyavs at redhat.com
Mon Dec 9 21:04:29 AEDT 2024


Dear colleagues,

Can we somehow improve the UX related to a relatively freshly
introduced PerSourcePenalties option?

A popular pattern implies installation of the users' keys to a freshly
installed machine using ssh-copy-id script. The default settings don't
allow this command to work normally and causes login failures.

A reasonable workaround could be adding some threshold for a number of
failures before the penalties are applied.

-- 
Dmitry Belyavskiy


More information about the openssh-unix-dev mailing list