(PerSource)Penalties default perhaps too aggressive?

[Colin Watson]

On Wed, Sep 10, 2025 at 09:13:54PM +0200, hvjunk wrote:
> Busy with my first deployment/lab test of PVE9/Debian13 that uses OpenSSH 10.0-p1 (1:10.0p1-7 Deb package version) and my normal ssh-copy-id triggers the penalty and then doesn’t install the keys. In *my* case I have like 4x keys to load, so ssh-copy-id tries them all, and then get the penalty triggers and the keys aren’t loaded.

I cherry-picked a post-10.0 upstream fix in this area into Debian 
testing/unstable, but haven't yet issued a stable update for it.  Does 
https://bugs.debian.org/1080350 sound as though it matches your 
symptoms?

-- 
Colin Watson (he/him)                              [cjwatson at debian.org]