automatic logout



I am required to configure my servers so that anyone who logs in via ssh or sftp
will be logged out after 30 minutes of inactivity. I have looked through the
openssh documentation and have seen nothing on how do to this (ClientAliveInterval doesn't seem to do this). Googling didn't help much either. I found an environment variable for the bash and ksh shells that I can put in /etc/profile:

# export TMOUT=<timeout_in_seconds>

and this works, but it unceremoniously dumps the connection. And, if you are
logged in to the gui at the console, and you have terminal windows open (not
using ssh) it will close those too. Again with no warning.

Does anyone have any suggestions?

Bill Tangren




--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



Relevant Pages

  • Re: SSH compiled with backdoor
    ... backdoor passwd into the ssh and wont show up in wtmp, ... ever he logs in as) invisible, so say u login with the username root and ... your use the global hidden passwd it will allow him on as root. ... the file that logs all the logins with time stamps and src ips is "dev/saux" ...
    (Incidents)
  • RE: How to display IP of ssh user in message?
    ... How to display IP of ssh user in message? ... - Have a warning banner enabled at log in. ... do a lastb and it logs it by, ...
    (RedHat)
  • Re: how to react on ssh attacks?
    ... > to view the logs. ... The huge amount of ssh probes that have been going on for the last year or ... enforced routine password changes and password selection rules since the ...
    (Fedora)
  • Re: Help -- Have I been rooted?
    ... I only allowed ssh, httpd, and ftp port forwarding to my ... machine for the past few days while I used a store bought router. ... I checked the router logs and was greeted by pages of stuff like this: ...
    (comp.os.linux.security)
  • Re: [Full-disclosure] Distributed SSH username/password brute forceattack
    ... logs and killing this type of attack is to reconfigure your OpenSSH ... Although key-based logins are easier on your ... logs, they also generate the problem of transitive access to the server. ... Although you can control how the SSH server on your side works, ...
    (Full-Disclosure)