summaryrefslogtreecommitdiff
path: root/sshd.8
diff options
context:
space:
mode:
authorBen Lindstrom <mouring@eviladmin.org>2001-04-16 02:03:49 +0000
committerBen Lindstrom <mouring@eviladmin.org>2001-04-16 02:03:49 +0000
commita8f3972ce6fd3a7104e2cb33e261b43238af2e96 (patch)
tree46ad7542c5c927651b7b4b64690463f2d32dd832 /sshd.8
parent302ea6f2f919acb2727a21f2c2c5e86bfed6053a (diff)
downloadopenssh-git-a8f3972ce6fd3a7104e2cb33e261b43238af2e96.tar.gz
- stevesk@cvs.openbsd.org 2001/04/15 19:41:21
[sshd.8] some ClientAlive cleanup; ok markus@
Diffstat (limited to 'sshd.8')
-rw-r--r--sshd.818
1 files changed, 12 insertions, 6 deletions
diff --git a/sshd.8 b/sshd.8
index 887cc3ba..e8af65a8 100644
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.\" $OpenBSD: sshd.8,v 1.115 2001/04/13 22:46:54 beck Exp $
+.\" $OpenBSD: sshd.8,v 1.116 2001/04/15 19:41:21 stevesk Exp $
.Dd September 25, 1999
.Dt SSHD 8
.Os
@@ -368,9 +368,10 @@ Sets a timeout interval in seconds after which if no data has been received
from the client,
.Nm
will send a message through the encrypted
-channel to request a response from the client. This may only be
-used on a server supporting only protocol version 2. The default
+channel to request a response from the client.
+The default
is 0, indicating that these messages will not be sent to the client.
+This option applies to protocol version 2 only.
.It Cm ClientAliveCountMax
Sets the number of client alive messages (see above) which may be
sent without
@@ -380,12 +381,17 @@ reached while client alive messages are being sent,
.Nm
will disconnect the client, terminating the session. It is important
to note that the use of client alive messages is very different from
-Keepalive (below). The client alive messages are sent through the
+.Cm Keepalive
+(below). The client alive messages are sent through the
encrypted channel and therefore will not be spoofable. The TCP keepalive
-option enable by Keepalive is spoofable. You want to use the client
+option enabled by
+.Cm Keepalive
+is spoofable. You want to use the client
alive mechanism when you are basing something important on
clients having an active connection to the server.
- The default is value is 3. If you set ClientAliveInterval
+.Pp
+The default value is 3. If you set
+.Cm ClientAliveInterval
(above) to 15, and leave this value at the default, unresponsive ssh clients
will be disconnected after approximately 45 seconds.
.It Cm DenyGroups