Re: Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-21 Thread Peter Jeremy
On Wed, Nov 19, 2003 at 09:26:10PM -0800, Len Sassaman wrote: It is my intuition from this behavior that the sshd master process listening for connections is unable to spawn a new process to complete the authentication step, and thus the connection is being dropped. There is no information of

Re: Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-20 Thread Robert Watson
On Wed, 19 Nov 2003, Len Sassaman wrote: It is my intuition from this behavior that the sshd master process listening for connections is unable to spawn a new process to complete the authentication step, and thus the connection is being dropped. There is no information of use in dmesg, nor

Re: Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-20 Thread Ken Smith
On Thu, Nov 20, 2003 at 10:56:08AM -0500, Robert Watson wrote: Hmm. Well, it certainly sounds like a resource limit to me, especially if it's a nice round number like 150 or 300. One possibility might be running out of pseudo-terminals to support the login sessions. pty's are created as

Re: Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-20 Thread Robert Watson
On Thu, 20 Nov 2003, Ken Smith wrote: On Thu, Nov 20, 2003 at 10:56:08AM -0500, Robert Watson wrote: Hmm. Well, it certainly sounds like a resource limit to me, especially if it's a nice round number like 150 or 300. One possibility might be running out of pseudo-terminals to support

Re: Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-20 Thread Tim Kientzle
Len Sassaman wrote: The problem is that after about 150 users log in (300ish sshd sessions, since I am using privsep), incoming connections start getting dropped. That number (150) sounds awfully familiar; I feel like I've seen it somewhere recently. H Try an 'fstat' when connections

Re: Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-20 Thread Len Sassaman
Hmm. Well, it certainly sounds like a resource limit to me, especially if it's a nice round number like 150 or 300. However, I'm also having a bit of trouble seeing, off the top of my head, which limit it might be. It sounds like you've got the ones I would think of. A quick skim of sshd.c

Re: Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-20 Thread Jamie Clark
Tim Kientzle wrote: Try an 'fstat' when connections start getting dropped. I wonder if something (PAM module, maybe?) is opening a file on each connection and you're running out of per-process file descriptors. A similar thing happened here - although it wasn't sshd at fault. Len mentioned using

Help request: problems with a 5.1 server and large numbers of ssh users.

2003-11-19 Thread Len Sassaman
Hi folks, I have a problem, and I am unable to find previous discussions of it. Any pointers or clues would be much appreciated. I have a FreeBSD 5.1 server that needs to be able to handle several thousand simultaneous ssh sessions from distinct users. (I am using FreeBSD 5.1 because I need