It doesn't work as I want. ClientAliveInterval and ClientAliveCountMax work for scenario where the ssh session was terminated unexpectedly from client side without exiting properly (command exit was not used to close the session). For instance, the client workstation clashed. Somebody tripped on the power cord of the workstation. What I want is to terminate IDLE ssh session. For instance, somebody has a ssh session open and went for lunch without exiting the ssh session. ---------------------------------------------------------------------------------------------
Any comments or statements made in this transmission reflect the views of the sender and are not necessarily the views of the Federal Reserve Bank of New York. "Peter Tootill" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 10/21/2005 01:31 AM Please respond to Solaris-Users mailing list <[email protected]> To "'Solaris-Users mailing list'" <[email protected]> cc <[EMAIL PROTECTED]> Subject RE: [Solaris-Users] timing out ssh session I have to confess that I haven't tried it but this is what I was looking at. Does it not do what you want? Rgrds Peter ClientAliveInterval Sets a timeout interval in seconds after which, if no data has been received from the client, sshd sends a message through the encrypted channel to request a response from the client. The default is 0, indicating that these messages will not be sent to the client. This option applies only to protocol version 2. ClientAliveCountMax Sets the number of client alive messages (see Clien- tAliveInterval, above) that can be sent without sshd receiving any messages back from the client. If this threshold is reached while client alive messages are being sent, sshd will disconnect the client, terminating the session. It is important to note that the use of client alive messages is very different from KeepAlive (see below). The client alive messages are sent through the encrypted channel and therefore will not be spoofa- ble. The TCP keepalive option enabled by KeepAlive is spoofable. The client alive mechanism is valuable when a client or server depend on knowing when a connection has become inactive. The default value is 3. If ClientAliveInterval (above) is set to 15, and ClientAliveCountMax is left at the default, unresponsive ssh clients will be disconnected after approximately 45 seconds. Rgrds Peter ============================ Peter Tootill [EMAIL PROTECTED] (01886)884462, (07866)772709 ============================ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 20 October 2005 21:46 To: Solaris-Users mailing list Cc: 'Solaris-Users mailing list'; [EMAIL PROTECTED] Subject: RE: [Solaris-Users] timing out ssh session Done it. No help. That is why I have posted the question. A search in www.openssh.org has revealed that openssh does not provide the capability. It has to be done at shell or router level. Since our default shell is Korn shell, I am going to use TMOUT to implement what I want. ---------------------------------------------------------------------------- ----------------- Any comments or statements made in this transmission reflect the views of the sender and are not necessarily the views of the Federal Reserve Bank of New York. "Peter Tootill" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 10/20/2005 04:33 PM Please respond to Solaris-Users mailing list <[email protected]> To "'Solaris-Users mailing list'" <[email protected]> cc Subject RE: [Solaris-Users] timing out ssh session man sshd_config Rgrds Peter -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 11 October 2005 14:58 To: Solaris-Users mailing list Subject: [Solaris-Users] timing out ssh session Is there a way to time out ssh session? Force a ssh session to terminate after 15 minutes of idleness. ---------------------------------------------------------------------------- ----------------- Any comments or statements made in this transmission reflect the views of the sender and are not necessarily the views of the Federal Reserve Bank of New York. _______________________________________________ Solaris-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/solaris-users _______________________________________________ Solaris-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/solaris-users _______________________________________________ Solaris-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/solaris-users _______________________________________________ Solaris-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/solaris-users _______________________________________________ Solaris-Users mailing list [email protected] http://www.filibeto.org/mailman/listinfo/solaris-users
