Rudder

sshd_config can end with Match blocks such as :

# Additional Match Blocks
Match User john,susie,jane,tom
    AllowTcpForwarding no
    X11Forwarding no
    PermitTTY yes

Such blocks do not “end” unless another such block begins.

Rudder standard technique “SSH server (OpenSSH)” appends defined global parameters at the end of the sshd_config file.

This causes the sshd daemon to fail restarting, as it considers this global parameters to be part of the previous “Match” block, which make the configuration invalid.