search for: ouellet

...dy present, and then > force the use of that script via the sshd_config Subsystem directive. I'm using the internal-sftp server, because it's a chrooted setup. Not sure this can easily be done with this setup Thanks, Fran?ois > > > > On 30 Mar 2023, at 22:43, Fran?ois Ouellet <franco at sol.mpact.tv> wrote: > > > > > > Hi, > > > > > > We need to limit concurrent sftp logins to one per user (because of bad > > > client behaviour). Is there any way to achieve this I have overlooked? > > > > > > It se...

On Thu, 30 Mar 2023, Fran?ois Ouellet wrote: > Hi, > > We need to limit concurrent sftp logins to one per user (because of bad > client behaviour). Is there any way to achieve this I have overlooked? > > It seems it could be possible with pam_limits, if sftp sessions were > recorded in utmp (a guess from what I...

Hi, We need to limit concurrent sftp logins to one per user (because of bad client behaviour). Is there any way to achieve this I have overlooked? It seems it could be possible with pam_limits, if sftp sessions were recorded in utmp (a guess from what I found googling around). If I configure /etc/security/limits.conf with testuser hard maxlogins 1 and connect with ssh, and try a second

> On 03 Apr 2023, at 15:38, Fran?ois Ouellet <franco at sol.mpact.tv> wrote: > > I'm using the internal-sftp server, because it's a chrooted setup. > Not sure this can easily be done with this setup Yes, I know it's not OpenSSH, I'm just a happy user, but seriously for this use case, consider CrushFTP, or Pr...

Le Monday, 3 April 2023, 00:05:25 EDT Damien Miller a ?crit : > On Thu, 30 Mar 2023, Fran?ois Ouellet wrote: > > > Hi, > > > > We need to limit concurrent sftp logins to one per user (because of bad > > client behaviour). Is there any way to achieve this I have overlooked? > > > > It seems it could be possible with pam_limits, if sftp sessions were > &g...

...tp different from the terminal sessions You could use an sftp-server wrapper script that creates a lock file/dir or another way to detect if a connection is already present, and then force the use of that script via the sshd_config Subsystem directive. > > On 30 Mar 2023, at 22:43, Fran?ois Ouellet <franco at sol.mpact.tv> wrote: > > > > Hi, > > > > We need to limit concurrent sftp logins to one per user (because of bad > > client behaviour). Is there any way to achieve this I have overlooked? > > > > It seems it could be possible with pam_l...

Le Saturday, 1 April 2023, 02:06:04 EDT Philipp Marek a ?crit : > Set a max-process ulimit in /etc/security/limits.conf (using a group specification). > > For internal sftp 1, for external 2, I guess. I'v seen this suggested before and I have tried it then. It doesn't work with this particular config. I don't know why yet. It works when I don't use the internal-sftp

On 30.03.23 22:43, Fran?ois Ouellet wrote: > We need to limit concurrent sftp logins to one per user (because of bad > client behaviour). Is there any way to achieve this I have overlooked? What authentication method(s) do your users use? On our Internet-facing SFTP server, by default (few exceptions), we accept only pubkey...

On Mon, Apr 3, 2023 at 12:16?AM Damien Miller <djm at mindrot.org> wrote: > > On Thu, 30 Mar 2023, Fran?ois Ouellet wrote: > > > Hi, > > > > We need to limit concurrent sftp logins to one per user (because of bad > > client behaviour). Is there any way to achieve this I have overlooked? > > > > It seems it could be possible with pam_limits, if sftp sessions were > >...

https://bugzilla.mindrot.org/show_bug.cgi?id=2319 Bug ID: 2319 Summary: [PATCH REVIEW] U2F authentication Product: Portable OpenSSH Version: 6.7p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: Miscellaneous Assignee: unassigned-bugs at

Hi, I don't know if I'm sending this to the right place but I've looked throught tens and tens of topics on http://tolstoy.newcastle.edu.au/ and finally found that email address where I can maybe find some help. Well my main goal is to get to use the lapack library within my R package (which can be done using calls from C). But in order to do this I have to create a file src/Makevars

Hi, I don't know if I'm sending this to the right place but I've looked throught tens and tens of topics on http://tolstoy.newcastle.edu.au/ and finally found that email address where I can maybe find some help. Well my main goal is to get to use the lapack library within my R package (which can be done using calls from C). But in order to do this I have to create a file src/Makevars

Hi, I am loosing myself here. Please correct me as I obviously don't get it yet. I read the information on multiple sites so far about rsync and I thought that: [simple_path_name] path = /rsync_files_here comment = My Very Own Rsync Server uid = nobody gid = nobody read only = no list = yes auth users = username secrets file = /etc/rsyncd.scrt Would actually limit