[BSD6] SSH Restriction

[Ed Schouten]

Hello Karim,

* karim.bourenane at orange-ftgroup.com <karim.bourenane at orange-ftgroup.com> wrote:
> I have one question. How i can restrict ( limit ) 1 user to have for
> exemple 5 ssh connection in simutanous time, no more ?

It's quite funny you ask this question, because I've been working on
this last week.

The new TTY code, which I'll commit next week, adds a new rlimit to the
kernel called RLIMIT_NPTS. This rlimit allows you to limit the number of
pseudo-terminals allocated by a single user. This means you can limit
the number of login sessions by tuning the "pseudoterminals" field in
/etc/login.conf.

This seems to work with tools like screen(1), xterm(1), etc.
Unfortunately I didn't get it working with OpenSSH, because OpenSSH
allocates terminals while been root. I've already contacted the OpenSSH
folks about this, but I haven't got any response (yet).

-- 
 Ed Schouten <ed at 80386.nl>
 WWW: http://80386.nl/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20080801/ca096c13/attachment.pgp