Re: [Isms] Session timeouts?

[Jeffrey Hutzelman <jhutz at cmu.edu>]

--On Wednesday, April 02, 2008 01:45:38 PM -0400 "David B. Nelson" 
<d.b.nelson at comcast.net> wrote:

>> Since we don't know which implementation of SSH or which
>> implementation of RADIUS will be used, would it make sense to simply
>> add an implementer note that they might want to configure their
>> implementation to utilize such parameters?
>
> That presumes that it's a configuration option, i.e. that the feature has
> been coded into the implementation and simply needs to be enabled at run
> time.  That may not always be the case.

True, but that is a problem for the ssh implementors.  I think it's 
entirely reasonable to specify RADIUS attributes which describe session 
timeout behavior for SSH, with the understanding that while there is a 
standard way to describe the timeouts, there is no requirement that an SSH 
server actually implement them.

-- Jeff
_______________________________________________
Isms mailing list
Isms at ietf.org
https://www.ietf.org/mailman/listinfo/isms