max_connections in ssh


 
Thread Tools Search this Thread
Operating Systems AIX max_connections in ssh
# 1  
Old 02-12-2008
max_connections in ssh

Sir's, the problem is i have script and 1 user in different 30 servers that ssh to our main server at the same time. Then after that may account automatically locked. I dont know what is the reason, is it the max connection of 1 user using ssh.

Pls help. How to fix this.
# 2  
Old 02-12-2008
Quote:
Originally Posted by invinzin21
Sir's, the problem is i have script and 1 user in different 30 servers that ssh to our main server at the same time. Then after that may account automatically locked. I dont know what is the reason, is it the max connection of 1 user using ssh. Pls help. How to fix this.
I am not sure I follow exactly:

You have a script that ssh's to 30 other servers?
You have a script that ssh's from 30 other machines?

Your account is automatically 'locked'? What does this mean exactly, its not a normal error message someone is going to likely see for this type of activity.

From what I recall about programs like dssh (distributed secure shell, where you 'dssh web' and it will make a ssh connection to all your web family hosts, then if you type 'apachectl restart' it will issue the command on all the hosts and give you output / logging with a prefix of the host name) is that they handle this type of thing quite easily. I would look to the faq's of the dssh like applications, there are a few good ones out there.

If you gave us the os your using and more detail on this 'error' it would be helpful. My guess is that your hitting a ulimit or activating a ids/snort rule that some administrator that is ahead of you on this mischief.
# 3  
Old 02-12-2008
Amen to what HPAVC said: troubleshooting systems one never has seen would be a lot easier if at least the problems arising would be described concisely.

A possible problem could be the "maxlogin" value of AIX. It limits the number of simultaneous non-root connections. The value can be found in /etc/security/login.defs, look for a line that looks "maxlogins = <nr>" in the "usw:" stanza.

You can change the value by issuing:

chlicense -I -u <number>

I hope this helps.

bakunin
# 4  
Old 02-12-2008
Thanks for insights sir's..i will rephrase my statement, i have 1 main server, and 30 sub server. In that 30 sub server i have 1 script each that ssh to my main server w/ the same USER and Password that they were using. After that it will locked that user. so my question why SSH locked my account or the system locked my account. How can i adjust max_user_connection? Or is that the problem? i dont know why it locked the account. Every morning i always unlocked the account. Please help
# 5  
Old 02-13-2008
Quote:
Originally Posted by invinzin21
Thanks for insights sir's..i will rephrase my statement, i have 1 main server, and 30 sub server. In that 30 sub server i have 1 script each that ssh to my main server w/ the same USER and Password that they were using. After that it will locked that user. so my question why SSH locked my account or the system locked my account. How can i adjust max_user_connection? Or is that the problem? i dont know why it locked the account. Every morning i always unlocked the account. Please help
No clue without details on the OS and the exact error we are just guessing, I mean the tool that you "unlock" the account with should provide the exact answer it its man page "also see: ..." area on how to modify.

Also odd that it occurs after all 30 are done, rather than on the 24th login and then the last 6 fail or what not.
# 6  
Old 02-13-2008
something like that, the scripts were meant for backup, they were some files that have been backup they are some not. Because lit was locked after some servers ssh to my main server. And every morning I reset the account. But the bad thing is they were files were'nt backup because the account has been locked.

I guess there's no problem w/ my aix 5.2, it only happens now, where a lot of servers using only 1 account.
# 7  
Old 02-13-2008
Well open up the license and or auth logs and ...

$ ssh mainserver
$ ssh mainserver
...
$ ssh mainserver
$ ssh mainserver

in a loop in another tty and see exactly what is locking that account. It maybe be enough to just add it to a privileged group wheel, adm, backup or whatever the lockout does.

The error should exactly tell you what you need to start looking for man page wise.
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Find active SSH servers w/ ssh keys on LAN

Hi, I am trying to complete my bash script in order to find which SSH servers on LAN are still active with the ssh keys, but i am frozen at this step: #!/bin/bash # LAN SSH KEYS DISCOVERY SCRIPT </etc/passwd \ grep /bin/bash | cut -d: -f6 | sudo xargs -i -- sh -c ' && cat... (11 Replies)
Discussion started by: syrius
11 Replies

2. UNIX for Beginners Questions & Answers

Ssh script to validate ssh connection to multiple serves with status

Hi, I want to validate ssh connection one after one for multiple servers..... password less keys already setup but now i want to validate if ssh is working fine or not... I have .sh script like below and i have servers.txt contains all the list of servers #/bin/bash for host in $(cat... (3 Replies)
Discussion started by: sreeram4
3 Replies

3. Shell Programming and Scripting

Ssh = ssh expect and keep everything not change include parameter postion

I have write a script which contains ssh -p 12345 dcplatform@10.125.42.50 ssh 127.0.0.1 -p 5555 "$CMD" ssh root@$GUEST_IP "$CMD" before I use public key, it works well, now I want to change to "expect", BUT I don't want to change above code and "parameter position" I can post a... (1 Reply)
Discussion started by: yanglei_fage
1 Replies

4. Shell Programming and Scripting

Using ssh to add register key on ssh server

Hi, I want to use ssh to add a register key on remote ssh server. Since there are space characters in my register key string, it always failed. If there is no space characters in the string, it worked fine. The following is what I have tried. It seems that "ssh" command doesn't care about double... (9 Replies)
Discussion started by: leaftree
9 Replies

5. Shell Programming and Scripting

could not send commands SSH session with Net::SSH::Expect

I am using Net::SSH::Expect to connect to the device(iLO) with SSH. After the $ssh->login() I'm able to view the prompt, but not able to send any coommands. With the putty I can connect to the device and execute the commands without any issues. Here is the sample script my $ssh =... (0 Replies)
Discussion started by: hansini
0 Replies
Login or Register to Ask a Question