(command.CommandList
  children: [
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:tid)
          op: assign_op.Equal
          rhs: {(DQ <'connect after login grace timeout'>)}
          spids: [7]
        )
      ]
    )
    (C {<trace>} {(DQ <'test login grace with privsep'>)})
    (C {<cp>} {($ Id.VSub_DollarName '$OBJ') <'/sshd_config'>} 
      {($ Id.VSub_DollarName '$OBJ') <'/sshd_config.orig'>}
    )
    (command.Simple
      words: [{<grep>} {<-vi>} {<LoginGraceTime>} {($ Id.VSub_DollarName '$OBJ') <'/sshd_config.orig'>}]
      redirects: [
        (redir
          op: <Id.Redir_Great '>'>
          loc: (redir_loc.Fd fd:1)
          arg: {($ Id.VSub_DollarName '$OBJ') <'/sshd_config'>}
        )
      ]
      do_fork: T
    )
    (command.Simple
      words: [{<echo>} {(DQ <'LoginGraceTime 10s'>)}]
      redirects: [
        (redir
          op: <Id.Redir_DGreat '>>'>
          loc: (redir_loc.Fd fd:1)
          arg: {($ Id.VSub_DollarName '$OBJ') <'/sshd_config'>}
        )
      ]
      do_fork: T
    )
    (command.Simple
      words: [{<echo>} {(DQ <'MaxStartups 1'>)}]
      redirects: [
        (redir
          op: <Id.Redir_DGreat '>>'>
          loc: (redir_loc.Fd fd:1)
          arg: {($ Id.VSub_DollarName '$OBJ') <'/sshd_config'>}
        )
      ]
      do_fork: T
    )
    (C {<start_sshd>})
    (command.Sentence
      child: 
        (command.Pipeline
          children: [
            (command.Subshell
              child: 
                (command.CommandList
                  children: [
                    (command.Sentence
                      child: (C {<echo>} {<SSH-2.0-fake>})
                      terminator: <Id.Op_Semi _>
                    )
                    (C {<sleep>} {<60>})
                  ]
                )
            )
            (command.Simple
              words: [{<telnet>} {<127.0.0.1>} {(${ Id.VSub_Name PORT)}]
              redirects: [
                (redir
                  op: <Id.Redir_Great '>'>
                  loc: (redir_loc.Fd fd:1)
                  arg: {<'/dev/null'>}
                )
                (redir op:<Id.Redir_GreatAnd '2>&'> loc:(redir_loc.Fd fd:2) arg:{<1>})
              ]
              do_fork: T
            )
          ]
          negated: F
        )
      terminator: <Id.Op_Amp _>
    )
    (C {<sleep>} {<15>})
    (C {(${ Id.VSub_Name SSH)} {<-F>} {($ Id.VSub_DollarName '$OBJ') <'/ssh_config'>} {<somehost>} 
      {<true>}
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [
                (command.Sentence
                  child: 
                    (C {<Id.Lit_LBracket '['>} {($ Id.VSub_QMark '$?')} {<-ne>} {<0>} 
                      {<Id.Lit_RBracket ']'>}
                    )
                  terminator: <Id.Op_Semi _>
                )
              ]
            )
          action: [(C {<fail>} {(DQ <'ssh connect after login grace timeout failed with privsep'>)})]
          spids: [113 126]
        )
      ]
    )
    (C {<stop_sshd>})
    (C {<trace>} {(DQ <'test login grace without privsep'>)})
    (command.Simple
      words: [{<echo>} {(DQ <'UsePrivilegeSeparation no'>)}]
      redirects: [
        (redir
          op: <Id.Redir_DGreat '>>'>
          loc: (redir_loc.Fd fd:1)
          arg: {($ Id.VSub_DollarName '$OBJ') <'/sshd_config'>}
        )
      ]
      do_fork: T
    )
    (C {<start_sshd>})
    (C {<sleep>} {<1>})
    (command.Sentence
      child: 
        (command.Pipeline
          children: [
            (command.Subshell
              child: 
                (command.CommandList
                  children: [
                    (command.Sentence
                      child: (C {<echo>} {<SSH-2.0-fake>})
                      terminator: <Id.Op_Semi _>
                    )
                    (C {<sleep>} {<60>})
                  ]
                )
            )
            (command.Simple
              words: [{<telnet>} {<127.0.0.1>} {(${ Id.VSub_Name PORT)}]
              redirects: [
                (redir
                  op: <Id.Redir_Great '>'>
                  loc: (redir_loc.Fd fd:1)
                  arg: {<'/dev/null'>}
                )
                (redir op:<Id.Redir_GreatAnd '2>&'> loc:(redir_loc.Fd fd:2) arg:{<1>})
              ]
              do_fork: T
            )
          ]
          negated: F
        )
      terminator: <Id.Op_Amp _>
    )
    (C {<sleep>} {<15>})
    (C {(${ Id.VSub_Name SSH)} {<-F>} {($ Id.VSub_DollarName '$OBJ') <'/ssh_config'>} {<somehost>} 
      {<true>}
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [
                (command.Sentence
                  child: 
                    (C {<Id.Lit_LBracket '['>} {($ Id.VSub_QMark '$?')} {<-ne>} {<0>} 
                      {<Id.Lit_RBracket ']'>}
                    )
                  terminator: <Id.Op_Semi _>
                )
              ]
            )
          action: [(C {<fail>} {(DQ <'ssh connect after login grace timeout failed without privsep'>)})]
          spids: [212 225]
        )
      ]
    )
  ]
)