SuSe linux SSH IDLE SESSION TimeOut configuration

正常情况下,Linux 可以通过配置 2个文件来更改ssh session timeout的时间,实现来自应用程序或者用户连到服务器后超时断开的设置。


1. 通过在/etc/profile,增加TMOUT

...
TMOUT=600
export TMOUT
.....
该方法可以实现ssh client工具连接断开


2.通过设置/etc/ssh/sshd_config

...
ClientAliveInterval 60
ClientAliveCountMax 3
.....

ClientAliveCountMax

Sets the number of client alive messages (see below) which may be sent without sshd(8) receiving any messages back from the client.  If this threshold is reached while client alive messages are being sent, sshd will disconnect the client, terminating the session.  It is important to note that the use of client alive messages is very different from TCPKeepAlive (below).  The client alive messages are sent through the encrypted channel and therefore will not be spoofable.  The TCP keepalive option enabled by TCPKeepAlive is spoofable.  The client alive mechanism is valuable when the client or server depend on knowing when a connection has become inactive.


ClientAliveInterval

Sets a timeout interval in seconds after which if no data has been received from the client, sshd(8) will send a message through the encrypted channel to request a response from the client.  The default is 0, indicating that these messages will not be sent to the client. This option applies to protocol version 2 only.

当第一种方法不做配置和更改的前提下,这种方法只有在将ClientAliveCountMax 设置成 “0”  SFTP 超时断开才会生效:



  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值