Stopping ‘PAM service(sshd) ignoring max retries’ errors in syslog

Seeing messages like sshd[28778]: PAM service(sshd) ignoring max retries; 6 > 3 in auth.log? It’s caused by pam_unix disagreeing with sshd on how many times a user can retry their password before getting disconnected. To stop it, add MaxAuthTries 3 to /etc/ssh/sshd_config.