> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Clint Pachl > Sent: Wednesday, 22 November 2006 2:41 PM > Cc: misc@openbsd.org > Subject: Re: sshd idle session > > atstake atstake wrote: > > I am using ssh (OpenSSH_4.4, OpenSSL 0.9.7j) on OpenBSD4.0. I want > > idle user sessions to timeout after a certain period. I tried > > ClientAliveInterval 15 and ClientAliveCountMax 3 in > > /etc/ssh/sshd_config & restarted sshd which, according to > > sshd_config(5) should end the idle user session in 45 seconds. Anyhow, > > that's not working and I was wondering > > if there's any other way to end/timeout idle users' ssh session. My > > shell is bash. > > > > I don't want to use idled or TCPKeepAlive if I can help it. > I don't think the Client Alive mechanism works as you expect. If you > were to watch the wire, using tcpdump, you would see sshd send a packet > to ssh client every 15 seconds, and, the ssh client will respond saying, > "our connection is good and I'm still here so don't terminate our > connection." This will happen regardless of whether there is activity in > the shell. If a physical disconnect were to occur between the client and > server, then the server would close it's connection with the > unresponsive client after three 15 second intervals. > > You could use the equivalent of ksh's TMOUT environment variable in > bash. I don't know bash so I can't be more specific. > > -pachl
What about: IdleTimeout <time_in_seconds> Regards, Russell Wood DISCLAIMER: Disclaimer. This e-mail is private and confidential. If you are not the intended recipient, please advise us by return e-mail immediately, and delete the e-mail and any attachments without using or disclosing the contents in any way. The views expressed in this e-mail are those of the author, and do not represent those of this company unless this is clearly indicated. You should scan this e-mail and any attachments for viruses. This company accepts no liability for any direct or indirect damage or loss resulting from the use of any attachments to this e-mail.
