[wellylug] ssh problem

[Mark Signal]

thanks to all who responded

I have found that the ssh clients can successfully use 
ServerAliveInterval and ServerAliveCountMax. Maybe this will help 
clients make a cleaner "break" when internet glitches appear.

I am also going to play with restrictive shells like rssh and see what I 
can do with those

cheers

Mark



jumbophut wrote:

>On Thu, 03 Feb 2005 11:21:20 +1300, Mark Signal wrote:
>  
>
>>Further info...
>>it appears that when the client connects with -N (Do not execute a
>>remote command - which is neccesary as client account have no shell) -
>>then  ClientAliveInterval does not work.
>>
>>Is there a shell that I can allocate users that allows them to do
>>nothing other than logon?
>>
>>    
>>
>
>As well as the suggestions others have offered, you can use pam_chroot
>to chroot users into a basically empty root and reduce the security
>risk of running a command.
>
>I haven't done it myself, but this has more info:
><http://www.debian.org/doc/manuals/securing-debian-howto/>
>
>  
>


-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.4 - Release Date: 1/02/2005