Date: Fri, 1 Aug 2008 14:10:04 +0200 From: Ed Schouten <ed@80386.nl> To: karim.bourenane@orange-ftgroup.com Cc: FreeBSD Current <freebsd-current@freebsd.org> Subject: Re: [BSD6] SSH Restriction Message-ID: <20080801121004.GO99951@hoeg.nl> In-Reply-To: <EB0526E758E4764B9B5186295C5790C901A7CF4E@PUEXCBJ0.nanterre.francetelecom.fr> References: <EB0526E758E4764B9B5186295C5790C901A7CF4E@PUEXCBJ0.nanterre.francetelecom.fr>
next in thread | previous in thread | raw e-mail | index | archive | help
--7PAM/4G1BR2SfWzg Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello Karim, * karim.bourenane@orange-ftgroup.com <karim.bourenane@orange-ftgroup.com> w= rote: > I have one question. How i can restrict ( limit ) 1 user to have for > exemple 5 ssh connection in simutanous time, no more ? It's quite funny you ask this question, because I've been working on this last week. The new TTY code, which I'll commit next week, adds a new rlimit to the kernel called RLIMIT_NPTS. This rlimit allows you to limit the number of pseudo-terminals allocated by a single user. This means you can limit the number of login sessions by tuning the "pseudoterminals" field in /etc/login.conf. This seems to work with tools like screen(1), xterm(1), etc. Unfortunately I didn't get it working with OpenSSH, because OpenSSH allocates terminals while been root. I've already contacted the OpenSSH folks about this, but I haven't got any response (yet). --=20 Ed Schouten <ed@80386.nl> WWW: http://80386.nl/ --7PAM/4G1BR2SfWzg Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (FreeBSD) iEYEARECAAYFAkiS/RwACgkQ52SDGA2eCwUvlgCfY9Mzbm+tIIurJn+vbYP4bMhX cqYAn1Csde84fjO5A5fcBn3m7kWFWQX0 =wmKU -----END PGP SIGNATURE----- --7PAM/4G1BR2SfWzg--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080801121004.GO99951>