I just took a Jessie system with all updates applied and tested that I could login with an as limit of 20000. I then configured apt for the stretch repository and used apt to upgrade it:
# apt-get install openssh-server Reading package lists... Done Building dependency tree Reading state information... Done The following extra packages will be installed: libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libssl1.0.2 openssh-client openssh-sftp-server ucf Suggested packages: krb5-doc krb5-user keychain libpam-ssh monkeysphere ssh-askpass molly-guard rssh ufw Recommended packages: krb5-locales xauth libpam-systemd ncurses-term The following NEW packages will be installed: libssl1.0.2 ucf The following packages will be upgraded: libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 openssh-client openssh-server openssh-sftp-server 7 upgraded, 2 newly installed, 0 to remove and 151 not upgraded. Need to get 3159 kB of archives. After this operation, 4455 kB of additional disk space will be used. Do you want to continue? [Y/n] y Get:1 http://mirror.internode.on.net/pub/debian/ stretch/main libssl1.0.2 amd64 1.0.2k-1 [1294 kB] Get:2 http://mirror.internode.on.net/pub/debian/ stretch/main libgssapi-krb5-2 amd64 1.15-1 [154 kB] Get:3 http://mirror.internode.on.net/pub/debian/ stretch/main libkrb5-3 amd64 1.15-1 [311 kB] Get:4 http://mirror.internode.on.net/pub/debian/ stretch/main libk5crypto3 amd64 1.15-1 [119 kB] Get:5 http://mirror.internode.on.net/pub/debian/ stretch/main libkrb5support0 amd64 1.15-1 [61.7 kB] Get:6 http://mirror.internode.on.net/pub/debian/ stretch/main openssh-sftp- server amd64 1:7.4p1-10 [39.5 kB] Get:7 http://mirror.internode.on.net/pub/debian/ stretch/main ucf all 3.0036 [70.2 kB] Get:8 http://mirror.internode.on.net/pub/debian/ stretch/main openssh-server amd64 1:7.4p1-10 [332 kB] Get:9 http://mirror.internode.on.net/pub/debian/ stretch/main openssh-client amd64 1:7.4p1-10 [777 kB] Fetched 3159 kB in 1s (1666 kB/s) Preconfiguring packages ... Selecting previously unselected package libssl1.0.2:amd64. (Reading database ... 10729 files and directories currently installed.) Preparing to unpack .../libssl1.0.2_1.0.2k-1_amd64.deb ... Unpacking libssl1.0.2:amd64 (1.0.2k-1) ... Preparing to unpack .../libgssapi-krb5-2_1.15-1_amd64.deb ... Unpacking libgssapi-krb5-2:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ... Preparing to unpack .../libkrb5-3_1.15-1_amd64.deb ... Unpacking libkrb5-3:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ... Preparing to unpack .../libk5crypto3_1.15-1_amd64.deb ... Unpacking libk5crypto3:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ... Preparing to unpack .../libkrb5support0_1.15-1_amd64.deb ... Unpacking libkrb5support0:amd64 (1.15-1) over (1.12.1+dfsg-19+deb8u2) ... Preparing to unpack .../openssh-sftp-server_1%3a7.4p1-10_amd64.deb ... Unpacking openssh-sftp-server (1:7.4p1-10) over (1:6.7p1-5+deb8u3) ... Selecting previously unselected package ucf. Preparing to unpack .../archives/ucf_3.0036_all.deb ... Moving old data out of the way Unpacking ucf (3.0036) ... Preparing to unpack .../openssh-server_1%3a7.4p1-10_amd64.deb ... Unpacking openssh-server (1:7.4p1-10) over (1:6.7p1-5+deb8u3) ... Preparing to unpack .../openssh-client_1%3a7.4p1-10_amd64.deb ... Unpacking openssh-client (1:7.4p1-10) over (1:6.7p1-5+deb8u3) ... Processing triggers for libc-bin (2.19-18+deb8u7) ... Processing triggers for man-db (2.7.0.2-5) ... Processing triggers for systemd (215-17+deb8u6) ... Setting up libssl1.0.2:amd64 (1.0.2k-1) ... Setting up libkrb5support0:amd64 (1.15-1) ... Setting up libk5crypto3:amd64 (1.15-1) ... Setting up libkrb5-3:amd64 (1.15-1) ... Setting up libgssapi-krb5-2:amd64 (1.15-1) ... Setting up openssh-client (1:7.4p1-10) ... Installing new version of config file /etc/ssh/moduli ... Installing new version of config file /etc/ssh/ssh_config ... Setting up openssh-sftp-server (1:7.4p1-10) ... Setting up ucf (3.0036) ... Setting up openssh-server (1:7.4p1-10) ... Installing new version of config file /etc/init.d/ssh ... Installing new version of config file /etc/init/ssh.conf ... Installing new version of config file /etc/network/if-up.d/openssh-server ... Processing triggers for libc-bin (2.19-18+deb8u7) ... Processing triggers for systemd (215-17+deb8u6) ... # After that I can't login to the account with an as limit set. Then I reverted to an earlier snapshot of that VM and upgraded just libgssapi- krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 and restarted sshd, that still let me login with an as limit of 20000 so the issue is clearly in sshd not in libraries it uses. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/
