I created a new debian (8.6) vm. Updated, installed packages and following this guide have joined it to my DC. I can su and login directly with my ad account I can even ssh IF I comment out the 'AllowUsers' line. I can ssh using a local account leaving 'AllowUsers'. I've restarted ssh and rebooted the VM several times but always same result. Error in auth.log

May  1 21:24:41 pc_name sshd[1002]: User [email protected] from 1.1.1.1 not allowed because not listed in AllowUsers
May  1 21:24:41 pc_name sshd[1002]: input_userauth_request: invalid user [email protected] [preauth]
May  1 21:24:41 pc_name sshd[1002]: error: Received disconnect from 1.1.1.1: 14: No supported authentication methods available [preauth]

As soon as I comment the section and restart boom I can ssh with my ldap account again. I've googled around for the better part of the night now finding pages all across the last 10 years from people that have done all sorts of problems and fixes but nothing seems to apply. Help?

• I should mention that I setup an ed25119 pub/private key pair and have disabled password auth but I don't think that matters based on the one change above fixing it.