Ghost Sessions causing login failures
Posted in 2007
Topics: Platform-Specific Issues, Versions, Editions & End-of-Life, Jobs, Consulting & Announcements
Has any one seen where a user logs off and their sessions still shows up
in onstat with no information and these will accumulate.
After a while, and it varies on the count, but users will start getting
errors stating they cannot login.
This is happening on a AIX 5.3 ML5 box with IDS 9.40.FC6
John A. Chauvin
Sr. Technical Consultant
MEDIWARE INFORMATION SYSTEMS
www.mediware.com <http://www.mediware.com/>
SecureLinkTM The future of secure support.
This message (including any attachments) constitutes a confidential
communication and/or contains confidential information intended for a
specific individual and purpose, and is protected by law. If you are
not the intended recipient, please notify the sender by return email and
delete this message and any attachments. Any disclosure, copying, or
distribution of this message, or the taking of any action based on it,
is strictly prohibited.
This usually happens with Windows clients which do not properly shupdown the
TCP connections. It is seen most often with BSD based UNIX servers (like AIX)
where the network timeout detection is set too high (BSD default was over an
hour). Reducing the network timeout detection to 15 mins or less alleviates
the problem (don't remember the setting/kernel parameter).
Art S. Kagel
----- Original Message -----
From: John Chauvin <ids@iiug.org>
At: 8/20 16:39:26
Has any one seen where a user logs off and their sessions still shows up
in onstat with no information and these will accumulate.
After a while, and it varies on the count, but users will start getting
errors stating they cannot login.
This is happening on a AIX 5.3 ML5 box with IDS 9.40.FC6
John A. Chauvin
Sr. Technical Consultant
MEDIWARE INFORMATION SYSTEMS
www.mediware.com <http://www.mediware.com/>
SecureLinkTM The future of secure support.
This message (including any attachments) constitutes a confidential
communication and/or contains confidential information intended for a
specific individual and purpose, and is protected by law. If you are
not the intended recipient, please notify the sender by return email and
delete this message and any attachments. Any disclosure, copying, or
distribution of this message, or the taking of any action based on it,
is strictly prohibited.
*******************************************************************************
Forum Note: Use "Reply" to post a response in the discussion forum.
Thanks that helps.
John A. Chauvin
Sr. Technical Consultant
MEDIWARE INFORMATION SYSTEMS
www.mediware.com
Office: (913) 307 - 1029
Mobile: (913) 489 - 1054
Fax: (913) 307 - 1111
John.Chauvin@mediware.com
SecureLinkTM The future of secure support.
This message (including any attachments) constitutes a confidential
communication and/or contains confidential information intended for a
specific individual and purpose, and is protected by law. If you are
not the intended recipient, please notify the sender by return email and
delete this message and any attachments. Any disclosure, copying, or
distribution of this message, or the taking of any action based on it,
is strictly prohibited.
-----Original Message-----
From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
ART KAGEL, BLOOMBERG/ 731 LEXIN
Sent: Monday, August 20, 2007 4:08 PM
To: ids@iiug.org
Subject: Re:Ghost Sessions causing login failures [9826]
This usually happens with Windows clients which do not properly shupdown
the TCP connections. It is seen most often with BSD based UNIX servers
(like AIX) where the network timeout detection is set too high (BSD
default was over an hour). Reducing the network timeout detection to 15
mins or less alleviates the problem (don't remember the setting/kernel
parameter).
Art S. Kagel
----- Original Message -----
From: John Chauvin <ids@iiug.org>
At: 8/20 16:39:26
Has any one seen where a user logs off and their sessions still shows up
in onstat with no information and these will accumulate.
After a while, and it varies on the count, but users will start getting
errors stating they cannot login.
This is happening on a AIX 5.3 ML5 box with IDS 9.40.FC6
John A. Chauvin
Sr. Technical Consultant
MEDIWARE INFORMATION SYSTEMS
www.mediware.com <http://www.mediware.com/>
SecureLinkTM The future of secure support.
This message (including any attachments) constitutes a confidential
communication and/or contains confidential information intended for a
specific individual and purpose, and is protected by law. If you are not
the intended recipient, please notify the sender by return email and
delete this message and any attachments. Any disclosure, copying, or
distribution of this message, or the taking of any action based on it,
is strictly prohibited.
************************************************************************
*******
Forum Note: Use "Reply" to post a response in the discussion forum.
************************************************************************
*******
Forum Note: Use "Reply" to post a response in the discussion forum.