862507 - Tweak KpyM SSH daemon settings

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: CIDuty, task)

Description

[John Hopkins (:jhopkins)]

Two problems I found in KpyM should each be fixable by a settings change.

1) SSH clients can be IP-banned which can prevent our automated systems from auto-rebooting a host.  The bans survive a reboot since each ban is tracked by a file in c:\Program Files(x86)\KTS\log\ip-ban\*

Possible fix: change ban_max_connections from 10 to 0 (disable IP-bans)

2) A broken SSH session can prevent anybody from logging in until the service is restarted (or a reboot).  I found a disconnected session under c:\Program Files(x86)\KTS\log\active-sessions\* and was unable to login.  Once the ssh daemon was restarted, I was able to login.

Possible fix: change allow_disconnected_sessions from 1 to 0 (kill disconnected sessions)

Comment 1

[Q]

Changes made and will propagate to win 8 machines.

Comment 2

[Q]

Propagated. Let me know if you see nay issues with the new settings.