SSHD Timeout

[rmueller58]

We are needing to implement SSH login timeouts on our HP/UX 11.11 system.

Does the "LoginGraceTime" define the idle time disconnect for SSH sessions? Is there a way to kill spawned processes from the timeout?

Just curious.

[Tim Nelson · Accepted solution]

-g login_grace_time
Gives the grace time for clients to authenticate themselves (de-
fault 120 seconds). If the client fails to authenticate the user
within this many seconds, the server disconnects and exits. A
value of zero indicates no limit.


Maybe look at ClientAliveInterval directive in sshd_config

ClientAliveInterval
Sets a timeout interval in seconds after which if no data has
been received from the client, sshd(8) will send a message
through the encrypted channel to request a response from the
client. The default is 0, indicating that these messages will
not be sent to the client. This option applies to protocol ver-
sion 2 only.


http://www.openssh.org/manual.html

[rmueller58]

Tim,

do you know if it will kill any spawned processes that are idle and attached to the parent process as well? will running spawned processes keep the session active?

We have some users that do kick of a major process and it needs to run unimpeded and when complete idle time begins ticking?