AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only

  • 1.  [HOWTO request] login idle time

    Posted Wed April 04, 2007 02:02 PM

    Originally posted by: SystemAdmin


    How does one set the idle time after which a remote user is logged out?

    We have a set of new machines with "default" configuration that logs
    out a remote user if there has been no interaction in more than ~20min.

    We need to extend this time, but do not know where it is configured.

    Any hints appreciated,

    TIA


  • 2.  Re: [HOWTO request] login idle time

    Posted Thu April 05, 2007 12:35 AM

    Originally posted by: SystemAdmin


    The default Timeout will be set in /etc/profile or /etc/environment file.

    1. Automatic logout, include in export line if uncommented
    #TMOUT=120

    But, I guess by default it is commented out.

    I read somewhere, user can overwrite global settings after they logged in to the system by manual export variables.


  • 3.  Re: [HOWTO request] login idle time

    Posted Thu April 05, 2007 02:08 PM

    Originally posted by: SystemAdmin


    Thank you for the pointer to TMOUT.

    Using,
    ksh> export TMOUT=14400
    ksh> echo $TMOUT
    14400
    we could extend the timeout from its apparent default of ~1200sec,
    but it still timed out at ~5400sec.

    Further experiments with TMOUT=0, have resulted in setting the
    time successfully to less than ~90min but not to more than ~90min.

    ClientAliveInterval in .../ssh/sshd_config does not appear to set the ~90min limit.

    I've read the
    "Re: TMOUT"
    "Re: Timeout after 30 second with telnet on AIX 5.3 ML3", and
    "Re: How to increase Shell time out value in AIX"
    threads in this forum.

    Is there another environment variable somewhere?
    Is there another configuration file involved?

    TIA,


  • 4.  Re: [HOWTO request] login idle time

    Posted Thu April 05, 2007 02:38 PM

    Originally posted by: SystemAdmin


    There is also a TIMEOUT value to set. So set both that and TMOUT.
    See: http://www-03.ibm.com/servers/aix/whitepapers/aix_security.pdf#search=%2

    Section: Enforcing Automatic Logoff

    also
    http://publib.boulder.ibm.com/infocenter/pseries/v5r3/index.jsp?topic=/com.ibm.aix.security/doc/security/enforcing_auto_logoff.htm

    The TMOUT parameter works in the ksh (Korn) shell, and the TIMEOUT parameter works in the bsh (Bourne) shell. For more information about the TMOUT parameter, see Parameter substitution in the Korn shell or POSIX shell. For more information about the TIMEOUT parameter, see Variable substitution in the Bourne shell.