Originally posted by: SystemAdmin

We have a warehouse management application which VPN's from remote state to initiate a remote interface which the remote users (50+) need to access. The LPAR is running AIX 5.2.08 and we have discovered that ONLY the VPN connections are having bad disconnects and leaving running orphans (who does not show them logged in, but proess table (using tprof) is showing ksh/f60run app/and other processes which are spawning over and over again consuming CPU due to the bad disconnect.

Does anyone know what parameters to tune (no command?) which will either:
1. extend latency to wait on disconnect or remote commands?
2. specific to tty's that from VPN's

Are there any:
1. kernel communication/OS parameters which allow me to identify VPN tty connections?
2. other VPN tuning we need to contemplate in view of the latency issues above?

Tania from DFA.
#AIX-Forum

Originally posted by: MarkTaylor

what version of sshd do you have installed ???

rpm -qa | grep ssh
lslpp -l | grep ssh

Older versions of so called AIX sshd were not so good at updating the wtmp / utmp and have caused issues in the past

Rgds
Mark Taylor
#AIX-Forum

Originally posted by: SystemAdmin

Thanks for your help.
We have openssh / Open Secure Shell v4.1.0.5200.
Regards wtmp, we have bos.rte v5.2.0.85.
#AIX-Forum

Originally posted by: MarkTaylor

sorry, jumped the gun there :)

.. what VPN method are you using .. ??
#AIX-Forum

Originally posted by: SystemAdmin

We are using latest version of Checkpoint VPN.
#AIX-Forum

Originally posted by: SystemAdmin

How about "no" tuning?
#AIX-Forum