Hi, we use OpenSSH_3.8.1p1 and we would like to change the complete printer Spool communication from Unix r-Commands to ssh "OpenSSH". Sometimes, we have problems, because of very high connection set-ups in extremely short time intervals, more than 10 open sessions. The connection set-up is partly declined with the error message: ssh_exchange_identification: Connection closed by remote host I think, our Problem is the Parameter "#define MAX_SESSIONS" in session.c. Have you scheduled to integrate the Parameter "MAX_SESSIONS" as a configuration Parameter in sshd_config? When not, is it possible to change the parameter "#define MAX_SESSIONS" in session.c from 10 to 30 or 50, without getting other Problems? Best regards Udo Gerwin Gruss Udo Gerwin -- __________________________________________________ Udo Gerwin Software Engineer Siemens Business Services SBS ORS GD AHS CC13 Riemekestr. 160, 33106 Paderborn Tel. +49 5251 8-25663 Fax +49 5251 8-25603 mailto:Gerwin at siemens.com __________________________________________________
Gerwin Udo wrote:> we use OpenSSH_3.8.1p1 and we would like to change the complete printer > Spool communication from Unix r-Commands to ssh "OpenSSH". Sometimes, we > have problems, because of very high connection set-ups in extremely > short time intervals, more than 10 open sessions. > The connection set-up is partly declined with the error message: > ssh_exchange_identification: Connection closed by remote host > > I think, our Problem is the Parameter "#define MAX_SESSIONS" in > session.c.If you're opening lots of ssh connections (as opposed to opening multiple sessions within a single connection) then the parameter you need to tweak in sshd_config is "MaxStartups". See the sshd_config man page for details.> Have you scheduled to integrate the Parameter "MAX_SESSIONS" as a > configuration Parameter in sshd_config?Maybe, it's not decided yet.> When not, is it possible to change the parameter "#define MAX_SESSIONS" > in session.c from 10 to 30 or 50, without getting other Problems?Probably, but I've never tried it. I don't think it will help in your case, though. -- Darren Tucker (dtucker at zip.com.au) GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.
no, it's not related to MAX_SESSIONS
it's more likely related to:
MaxStartups
Specifies the maximum number of concurrent unauthenticated con-
nections to the sshd daemon. Additional connections will be
dropped until authentication succeeds or the LoginGraceTime ex-
pires for a connection. The default is 10.
Alternatively, random early drop can be enabled by specifying the
three colon separated values ``start:rate:full'' (e.g.,
"10:30:60"). sshd will refuse connection attempts with a
proba-
bility of ``rate/100'' (30%) if there are currently
``start''
(10) unauthenticated connections. The probability increases lin-
early and all connection attempts are refused if the number of
unauthenticated connections reaches ``full'' (60).
On Wed, Jun 02, 2004 at 12:50:43PM +0200, Gerwin Udo
wrote:> Hi,
>
> we use OpenSSH_3.8.1p1 and we would like to change the complete printer
> Spool communication from Unix r-Commands to ssh "OpenSSH".
Sometimes, we
> have problems, because of very high connection set-ups in extremely
> short time intervals, more than 10 open sessions.
> The connection set-up is partly declined with the error message:
> ssh_exchange_identification: Connection closed by remote host
>
> I think, our Problem is the Parameter "#define MAX_SESSIONS" in
> session.c.
> Have you scheduled to integrate the Parameter "MAX_SESSIONS" as a
> configuration Parameter in sshd_config?
> When not, is it possible to change the parameter "#define
MAX_SESSIONS"
> in session.c from 10 to 30 or 50, without getting other Problems?
>
> Best regards
>
> Udo Gerwin
>
>
> Gruss Udo Gerwin
>
> --
> __________________________________________________
>
> Udo Gerwin
> Software Engineer
> Siemens Business Services
> SBS ORS GD AHS CC13
> Riemekestr. 160, 33106 Paderborn
> Tel. +49 5251 8-25663
> Fax +49 5251 8-25603
> mailto:Gerwin at siemens.com
> __________________________________________________
>
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev