Symantec Privileged Access Management

 View Only
  • 1.  session timeout and applet timeout when script runs

    Posted Sep 12, 2019 02:47 AM
    <enduser-root _nghost-c0="" ng-version="6.0.3"><enduser-esd _nghost-c6=""><enduser-frame-layout _ngcontent-c6="" _nghost-c7="">
    <enduser-mycases class="ng-star-inserted" _nghost-c15="">
    <enduser-tickets-detail class="ng-star-inserted" _ngcontent-c15="" fxflex="12 1 0" _nghost-c18=""><mat-tab-group class="tickets-tab mat-elevation-z4 full-height mat-tab-group mat-primary ng-star-inserted" mat-stretch-tabs="" _ngcontent-c18="">
    <mat-tab-body class="mat-tab-body ng-tns-c34-34 ng-star-inserted mat-tab-body-active" id="mat-tab-content-0-0" role="tabpanel" aria-labelledby="mat-tab-label-0-0">
    <enduser-dynamic-case-details-fields class="ng-star-inserted" _ngcontent-c18="" _nghost-c29="">

    Hi,

    In CAPAM we have set the session timeout and applet timeout as 10 minutes. When we are running some script In Linux/Network device that is more than half an hour, then how it can be handled by CAPAM. If the session is disconnected after 10 minutes of inactive time, if I connect the session again it is opening the new session in Linux device/Network device in CAPAM. Can you clarify this case, is the script runs in background or not?

    regards
    Ramesh

    </enduser-dynamic-case-details-fields>
    </mat-tab-body>
    </mat-tab-group></enduser-tickets-detail>
    </enduser-mycases>
    </enduser-frame-layout></enduser-esd></enduser-root>


  • 2.  RE: session timeout and applet timeout when script runs
    Best Answer

    Broadcom Employee
    Posted Sep 13, 2019 03:59 PM
    Edited by Christopher Hackett Sep 18, 2019 06:57 PM
    Hi,

    Our PAM Applet timeout session will act exactly the same way if SSHD (/etc/ssh/sshd_config) is configured with a timeout as well:

    ClientAliveInterval 60
    ClientAliveCountMax 0


    If you have a script that is running in the foreground, with no user input in session for over 1 minute, the session and therefore script will be killed.
    If the script is put to the background (./testscript.sh &) - it would continue to run.

    Regards,
    Kevin D.