sshd container failed to start: Directive 'MaxStartups' not allowed

[george-kuanli-peng]

Tag: 1.15.3

In the login-0 pod, the sshd container failed to start with the following error message:

Start sshd daemon
/mnt/ssh-configs/sshd_config line 18: Directive 'MaxStartups' is not allowed within a Match block

The slurm1-ssh-configs configmap has these settings, generated by internal/render/login/configmap.go:

{
    "sshd_config": "LogLevel INFO
        Port 22
        PermitRootLogin yes
        PasswordAuthentication no
        ChallengeResponseAuthentication no
        UsePAM yes
        AcceptEnv LANG LC_*
        X11Forwarding no
        AllowTcpForwarding yes
        Subsystem sftp internal-sftp
        HostKey /etc/ssh/sshd_keys/ssh_host_rsa_key
        HostKey /etc/ssh/sshd_keys/ssh_host_ecdsa_key
        HostKey /etc/ssh/sshd_keys/ssh_host_ed25519_key
        Match User *
            ChrootDirectory /mnt/jail
        ClientAliveInterval 9000
        ClientAliveCountMax 3
        MaxStartups 10:30:60
        LoginGraceTime9000
        MaxAuthTries4"
}

[george-kuanli-peng]

It is also noted:

• there are no spaces after LoginGraceTime
• Directive 'LoginGraceTime' is also not allowed within a Match block
• there are no spaces after MaxAuthTries

The complete fix could be:

        // res.AddLine("MaxStartups " + consts.SSHDMaxStartups)
        // res.AddLine("LoginGraceTime " + consts.SSHDLoginGraceTime)
        res.AddLine("MaxAuthTries " + consts.SSHDMaxAuthTries)

[Uburro]

HI. This issue has already been resolved. It will be included in the next release.

[Uburro]

1.15.2 version doesn't have this issue.

[george-kuanli-peng]

HI. This issue has already been resolved. It will be included in the next release.

Thanks a lot!