tech-userlevel archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: inconsistent between sshd_config and its manpage
In article <38d55933-d705-32b2-b0ab-37ebe3887e30%rk.phys.keio.ac.jp@localhost>,
Rin Okuyama <rokuyama%rk.phys.keio.ac.jp@localhost> wrote:
>sshd_config(5) (r1.23) says:
>
> LoginGraceTime
> The server disconnects after this time if the user has not
> successfully logged in. If the value is 0, there is no time
> limit. The default is 120 seconds but the default
> /etc/ssh/sshd_config overwrites it to 600 seconds.
>
>However, the corresponding part in /etc/sshd_config (r1.17) is:
>
> 39 # Authentication:
> 40
> 41 #LoginGraceTime 2m
>
>This non-standard default value of 600s is introduced to sshd_config
>r1.2 probably as a workaround for slow machines that cannot establish
>authentication within 120s:
>
>
>http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/external/bsd/openssh/dist/sshd_config#rev1.2
>
>But it was removed in r1.14 when OpenSSH 6.8 was imported. I don't know
>whether it is intentional or unintentional.
>
>
>http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/external/bsd/openssh/dist/sshd_config#rev1.14
>
>The question is which one, sshd_config or manpage, should be corrected.
>IMO, timeout of 600s is still useful for CPUs like i486 or MC68030.
I'll put it back in sshd_config.
christos
Home |
Main Index |
Thread Index |
Old Index