SSH Server Configuration - ClientAliveInterval?

[Mark Kraft]

In older versions of SIMP (4.0.6) we were able to adjust the ClientAliveInterval using extlookups:

ssh::server::conf::client_alive_interval,"3600"

Does this exist in 5.2.1?  I've looked through the module but I am not seeing a way to override using Hiera.

Thanks in advance,

Mark Kraft

Sotera Defense Solutions

[Trevor Vaughan]

Hi Mark,

In the new versions, we cherry pick the settings that we need for compliance and basic security. Anything outside of that should be set using the SSH augeasproviders.

For that option, you could use:

sshd_config{ 'ClientAliveInterval': value => '<whatever>' }

--
You received this message because you are subscribed to the Google Groups "SIMP Q&A Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to simp+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/simp/85566ec2-afd9-4974-aee4-8b62dbb14583%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Trevor Vaughan
Vice President, Onyx Point, Inc

(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --

[Mark Kraft]

Trevor,

How do I override the TMOUT value (SIMP sets it to 900) using augeas?

Mark

On Wednesday, December 14, 2016 at 11:25:09 AM UTC-6, Trevor Vaughan wrote:

Hi Mark,

In the new versions, we cherry pick the settings that we need for compliance and basic security. Anything outside of that should be set using the SSH augeasproviders.

For that option, you could use:

sshd_config{ 'ClientAliveInterval': value => '<whatever>' }

On Wed, Dec 14, 2016 at 11:25 AM, Mark Kraft <kra...@gmail.com> wrote:

In older versions of SIMP (4.0.6) we were able to adjust the ClientAliveInterval using extlookups:

ssh::server::conf::client_alive_interval,"3600"

Does this exist in 5.2.1?  I've looked through the module but I am not seeing a way to override using Hiera.

Thanks in advance,

Mark Kraft

Sotera Defense Solutions

--
You received this message because you are subscribed to the Google Groups "SIMP Q&A Forum" group.

To unsubscribe from this group and stop receiving emails from it, send an email to simp+uns...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/simp/85566ec2-afd9-4974-aee4-8b62dbb14583%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Trevor Vaughan]

Hi Mark,

TMOUT is set in the shell, not via SSH.

You can change via Hiera on the simplib module https://github.com/simp/pupmod-simp-simplib/blob/5.X/manifests/profile_settings.pp#L11

Trevor

To unsubscribe from this group and stop receiving emails from it, send an email to simp+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/simp/d8f41c2f-7399-4c7c-af9e-d5ed1a81b090%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.