Is /usr/games actually required in the path? That seems quite strange.

What would be better is finding out what was missing from the path that caused the ssh-auth script to fail for you - presumably some binary/command was failing to execute as it couldn't be found in the path. If we know what, then we can update the documentation to state:

The authentication script requires `<cmd>` to be accessible from the environment path

Rather than handing out a list of paths that might need to be in the environment as you suggest. These paths are entirely dependent on the OS/distribution and instructing users/sysadmins to add these to their paths is not a good setup guide/instruction.

We also cover this in Level Requirements a bit:

https://secure.phabricator.com/book/phabricator/article/installation_guide/#level-requirements

Mostly, we're not likely here to just randomly update the documentation. We'd need to first try to reproduce the issues you encountered and find an upstream solution if it does reproduce. Unless others are running into this problem, it may be some time.

For what it's worth, I don't use phabricator-ssh-hook.sh at all, I find it to be much simpler. Instead o use the following SSH configuration (which also allows me to run both administrative and VCS SSH over pirt 22):

I don't think that would impact the outcome here. ssh-auth would still fail: I believe the problem is that php is in /usr/local/bin (or maybe /usr/games), so ssh-auth can't execute without that in path.

Ah