SSH

From My Admin Page
Jump to: navigation, search

Idle Timeout

  • To set idle timeout, change in sshd_conf:
ClientAliveInterval <# seconds>
ClientAliveCountMax <# of times repeat interval>
So, to set a 3 hour timeout :
ClientAliveInterval 3600
ClientAliveCountMax 3

SFTP Only

  • If you setup a system group SFTPONLY and assign users to it, here's what you use so that they can only SFTP in and are chrooted to their directories...
# These lines must appear at the *end* of sshd_config

Match Group sftponly
       ForceCommand internal-sftp -f AUTH -l ERROR
       ChrootDirectory %h
       AllowTcpForwarding no