openssh bugs - May 2017 - [Bug 2718] New: SFTP idle timeout

https://bugzilla.mindrot.org/show_bug.cgi?id=2718

            Bug ID: 2718
           Summary: SFTP idle timeout
           Product: Portable OpenSSH
           Version: 7.5p1
          Hardware: Sparc
                OS: Solaris
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: sftp-server
          Assignee: unassigned-bugs at mindrot.org
          Reporter: tomas.kuthan at oracle.com

Implement new sftp-server option '-t idle_timeout'. When there is no
user activity for idle_timeout seconds, sftp session is forcibly closed
by the server. By default there is no time limit.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2718

Tomas Kuthan <tomas.kuthan at oracle.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |tomas.kuthan at oracle.com

--- Comment #1 from Tomas Kuthan <tomas.kuthan at oracle.com> ---
Created attachment 2981
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2981&action=edit
sftp idle timeout

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2718

--- Comment #2 from Tomas Kuthan <tomas.kuthan at oracle.com> ---
This feature was requested by a user, who claims that the large number
of opened, inactive but unterminated sftp client connections prolongs
fail-over to other cluster node, when performing regular maintenance
tasks. This extended fail-over time causes application outages, when
various application time outs are met.

With the ability to configure sftp-server to terminate inactive sftp
connections after time-out, the user hopes to keep the number of these
connections down and avoid application outages.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2718

Mike Frysinger <vapier at gentoo.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |vapier at gentoo.org

--- Comment #3 from Mike Frysinger <vapier at gentoo.org> ---
the select() syscall has a timeout option on it that is currently set
to NULL.  why not initialize that to the timeout you want and check the
return values in the loop for that condition ?  then you don't need to
muck around with signal/alarm.

you should update the usage string too so `sftp-server -h` includes the
new option.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2718

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED
                 CC|                            |djm at mindrot.org

--- Comment #4 from Damien Miller <djm at mindrot.org> ---
openssh-9.2 added ChannelTimeout and UnusedConnectionTimeout that allow
termination of idle sftp-server sessions

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.