sshd needs shorter client timeout for ltsp sessions

Bug #21467 reported by Oliver Grawert
6
Affects Status Importance Assigned to Milestone
ltsp (Ubuntu)
Invalid
Medium
Colin Watson

Bug Description

If a ltsp session is closed on the client, the session is kept alive for ~30
seconds on the server due to the default TCP timeout value, so a quick relogin
attempt will fail. Setting the ClientAliveInterval/ClientAliveCountMax to a
shorter value (10 sec should suffice) with sshd -o "..." on ltsp server startup
should solve this.

Revision history for this message
Colin Watson (cjwatson) wrote :

I think this is the wrong answer; if the LTSP session is persisting even after
client logout then that's the problem (and will possibly have other bad
side-effects because things are exiting uncleanly). We need to figure out why
that's happening.

Revision history for this message
Oliver Grawert (ogra) wrote :

i tried to track the issue a bit more, it seems the DISPLAY variable isnt
cleaned up fast enough in the environment after logout.
i can see in the ldm.log that the ssh connection was established correctly on
the second login attempt (see attached ldm.log), but was closed from the server.
as the attached xsession-errors file from the server shows, x-session-manager
exits with "cannot open display:". to make sure its not caused by any leftovers
from the former session i ran slay for the user between the two login attempts.

Revision history for this message
Oliver Grawert (ogra) wrote :

Created an attachment (id=3816)
ldm.log

Revision history for this message
Oliver Grawert (ogra) wrote :

Created an attachment (id=3817)
.xsession-errors

Revision history for this message
Oliver Grawert (ogra) wrote :

hmm, actually DISPLAY should be overwritten, so i suspect it still has something
to do with the internal tcp connection sshd uses for X forwarding...

Revision history for this message
Oliver Grawert (ogra) wrote :

the behavior is identical to bug #25528

This bug has been marked as a duplicate of bug 25528.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.