kick idle users off the system

noir911 · 10-26-2006, 04:02 AM

I got users logged on to the system (via ssh) and not logging out of their connection. I was wondering how I could kick out users who are idle more than 'x' days.

druuna · 10-26-2006, 11:36 AM

Hi,

Take a look at the ClientAliveInterval and ClientAliveCountMax setting (part of your sshd_config).

Quote:

The default (for ClientAliveCountMax) value is 3. If ClientAliveInterval (above) is set to 15, and ClientAliveCountMax is left at the default, responsive ssh clients will be disconnected after approximately 45 seconds.

See man sshd_config for full details.

Hope this helps.

noir911 · 11-21-2006, 06:51 PM

I used

ClientAliveInterval 15
ClientAliveCountMax 3

which should kick idle users in 45 seconds (according to the sshd_concig(5)). But if I do a w(1), I can still see the user logged in!

Micro420 · 11-21-2006, 06:58 PM

Maybe the user isn't idle????

matthewg42 · 11-21-2006, 07:03 PM

For idle shells, you could set the TMOUT variable. Of course, users can over-ride this in their personal .bashrc files, but most won't bother. This won't work if the user has some program in the foreground.

noir911 · 11-22-2006, 06:15 AM

TMOUT works fine. Thanks.