Match version instead of groups in connect-bigconf

The connect-bigconf makes a giant config file to test config passing
between the sshd subprocesses. Previously it used a bunch of "Match
group" lines to construct a large file. However checking group
membership can be expensive (e.g. if a large groups database is
present or if group lookup is remote via NSS). This could be slow
enough to exceed LoginGraceTime.

This switches it to "Match version" which is just a string compare
and does just as well for making a giant nonsense config file.
This commit is contained in:
Damien Miller committed 2025-08-18 16:47:23 +10:00
1 parent 6c84609e5f
commit 5e9ca80fe6
1 file changed
+1 -1
+1 -1
View File
@@ -4,7 +4,7 @@
tid="simple connect"
for x in `jot 10000 1` ; do
echo "Match group NONEXIST" >> $OBJ/sshd_config
echo "Match version NONEXIST" >> $OBJ/sshd_config
echo "ChrootDirectory /some/path/for/group/NONEXIST" >> $OBJ/sshd_config
done
#cat $OBJ/sshd_config