Re: how to set the idle-timeout in linux SSH

From: M E Fieu (sibu168_at_yahoo.com)
Date: 05/31/05

  • Next message: Globe Trotter: "kernel-debuginfo" 
    Date: Tue, 31 May 2005 03:52:10 -0700 (PDT)
To: For users of Fedora Core releases <fedora-list@redhat.com>

    > from "man sshd_config"
    >
    > ClientAliveInterval
    > Sets a timeout interval in seconds after which
    > if no data has been
    > received from the client, sshd will send a
    > message through the
    > encrypted channel to request a response from the
    > client. The default
    > is 0, indicating that these messages will not be
    > sent to the
    > client. This option applies to protocol version
    > 2 only.
    > ClientAliveCountMax
    > Sets the number of client alive messages (see
    > above) which may be
    > sent without sshd receiving any messages back
    > from the client.
    > If this threshold is reached while client alive
    > messages are being
    > sent, sshd will disconnect the client,
    > terminating the session.
    > It is important to note that the use of client
    > alive messages is very
    > different from TCPKeepAlive (below). The client
    > alive mes-
    > sages are sent through the encrypted channel and
    > therefore will not
    > be spoofable. The TCP keepalive option enabled
    > by TCPKeepAlive
    > is spoofable. The client alive mechanism is
    > valuable when the client
    > or server depend on knowing when a connection
    > has become
    > inactive.
    >
    > The default value is 3. If ClientAliveInterval
    > (above) is set to 15,
    > and ClientAliveCountMax is left at the default,
    > unresponsive
    > ssh clients will be disconnected after
    > approximately 45 seconds.
    >
    > Set this in your sshd_config and restart opensshd
    >
    > Hth

    >From the sshd_config that I have, there is no entry
    like ClientAliveInterval and ClientAliveCountMax in
    this file. Should I create the entry in that file?
    Besides, if there is no such entries in that file,
    what is the default value then ?

                    
    __________________________________
    Yahoo! Mail
    Stay connected, organized, and protected. Take the tour:
    http://tour.mail.yahoo.com/mailtour.html 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Globe Trotter: "kernel-debuginfo"

    Relevant Pages

    • The remote peer is no longer responding
      ... " Secure VPN connection terminated locally by the Client. ... RECEIVING <<< ISAKMP OAK AG, VID, VID, KE, ID, ... Crypto Active IKE SA, ...
      (comp.dcom.sys.cisco)
    • RE: sshd does not die when client issues control-C or closes
      ... I have been tesing OpenSSH sshd running under uClinux using Putty, ... I set my Client Keep alive parameters to issue 4 requests every ... # Or after 1 connection deny subsequent connections up to 2 ...
      (SSH)
    • Re: closing ASyncSocket
      ... receiving side after I received the last data. ... side (Client) doesn't realize the connection is closed. ... Do I need to call Closefrom within the OnClose() call triggered ...
      (microsoft.public.vc.mfc)
    • Re: HP-UX: ssh connections ignore CTRL+C interrupts
      ... > When I start sshd from an interactive shell, ... stty settings should probably be considered "uninitialized variables". ... The proper way for stty settings to be established is by the client. ... If you start a Unix/Linux based SSH client from a shell session, ...
      (SSH)
    • closing ASyncSocket
      ... receiving side after I received the last data. ... side (Client) doesn't realize the connection is closed. ... Do I need to call Closefrom within the OnClose() call triggered ...
      (microsoft.public.vc.mfc)