openssh unix dev - Dec 2017 - how to increase AllowUsers beyond 256 in sshd_config

Hi,

There are maximum 256 AllowUsers lines in sshd_config , something like

AllowUsers  user1 at 10.8.73.1

...

AllowUsers  user256 at 10.8.73.134

 

we have more than 256 users, how to increase AllowUsers beyond 256 ?

 

Thanks and regards.

Michael Li

 

SWIFT | Security Infrastructure, Messaging Solutions
Tel: +1 703 365 6136
 <http://www.swift.com/> www.swift.com

This e-mail and any attachments thereto may contain information which is
confidential and/or proprietary and intended for the sole use of the
recipient(s) named above. If you have received this e-mail in error, please
immediately notify the sender and delete the mail.  Thank you for your
co-operation.  SWIFT reserves the right to retain e-mail messages on its
systems and, under circumstances permitted by applicable law, to monitor and
intercept e-mail messages to and from its systems.

 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4554 bytes
Desc: not available
URL:
<http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20171208/672564bd/attachment.p7s>

On 9 December 2017 at 03:36, LI Michael <Michael.LI at swift.com> wrote:
[...]
> have more than 256 users, how to increase AllowUsers beyond 256 ?
>
That limit was recently removed (
http://anongit.mindrot.org/openssh.git/commit/?id=dceabc7a) however that
change has not yet made it into a released version.  Until then, I suggest
either putting your users into a group and using AllowGroups or
increasing MAX_ALLOW_USERS in servconf.h and recompiling (do "make
clean"
first).

-- 
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA (new)
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

On Fri, 8 Dec 2017, LI Michael wrote:
> Hi,
> 
> There are maximum 256 AllowUsers lines in sshd_config , something like
> 
> AllowUsers  user1 at 10.8.73.1
Even if AllowUsers supports more than 256 entries, there is still a
fixed limit on sshd_config line length at 4 or 8 KB.

You can work around both using multiple "Match user" stanzas though.

-d