Re: SSH connection timeout?



As far as logging someone off the shell if nothing has been typed for a
while, openssh does not support this. As another poster suggested, we
use the bash env variable TMOUT. I place it in /etc/profile. For 15
minutes of idle time I use "TMOUT=900". For C shell, "set autologout=15"
is placed in /etc/csh.cshrc. The downside is that these env variables
can be changed by users, but it does not really seem to be a big issue
for us. I also recall a idle daemon that is available, but it has been
a long time since I looked into it.


On Fri, 16 Feb 2007 09:25:23 -0500, "Clark, Patti" <Clarkp@xxxxxxxx>
said:
I've been working on tweaking RHEL4 for settings to meet various
security requirements. One question that has come up is whether an ssh
session can have an idle timeout set. I'd thought that using
ClientAliveInterval and ClientAliveCountMax were the solution (restart
sshd after mods). However, I am not seeing that happen. So, the
question, are these 2 parameters suppose to work for idle timeout, or
are they used only for when the client "system" really goes to lunch?
Are there parameters for setting idle timeout for ssh sessions?

Patti Clark
Unix System Administrator - RHCT
Office of Scientific and Technical Information

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



Relevant Pages

  • Re: SSH connection timeout?
    ... session can have an idle timeout set. ... ClientAliveInterval and ClientAliveCountMax are intreded to detect when a client is no longer connected. ... It is triggered by inactivity but as long as the session is up, ...
    (RedHat)
  • Re: SSH connection timeout?
    ... session can have an idle timeout set. ... ClientAliveInterval and ClientAliveCountMax were the solution (restart ...
    (RedHat)