As far as logging someone off the shell if nothing has been typed for a while, openssh does not support this. As another poster suggested, we use the bash env variable TMOUT. I place it in /etc/profile. For 15 minutes of idle time I use "TMOUT=900". For C shell, "set autologout=15" is placed in /etc/csh.cshrc. The downside is that these env variables can be changed by users, but it does not really seem to be a big issue for us. I also recall a idle daemon that is available, but it has been a long time since I looked into it. On Fri, 16 Feb 2007 09:25:23 -0500, "Clark, Patti" <Clarkp@xxxxxxxx> said: > I've been working on tweaking RHEL4 for settings to meet various > security requirements. One question that has come up is whether an ssh > session can have an idle timeout set. I'd thought that using > ClientAliveInterval and ClientAliveCountMax were the solution (restart > sshd after mods). However, I am not seeing that happen. So, the > question, are these 2 parameters suppose to work for idle timeout, or > are they used only for when the client "system" really goes to lunch? > Are there parameters for setting idle timeout for ssh sessions? > > Patti Clark > Unix System Administrator - RHCT > Office of Scientific and Technical Information > > -- > redhat-list mailing list > unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe > https://www.redhat.com/mailman/listinfo/redhat-list -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
