SSH Tectia

General

The General page contains the general server settings, for example, the maximum number of connections, FIPS mode, and banner message.

SSH Tectia Server Configuration - General page

Figure 4.4. SSH Tectia Server Configuration - General page

Maximum number of connections / Maximum number of processes

SSH Tectia Server uses a distributed architecture where the master server process launches several servant server processes that handle the actual client connections. The server's total number of connections is the number of connections multiplied by the number of processes.

Limiting the maximum number of connections is useful in systems where system overload may be caused by a high load in the server program when opening new connections.

Maximum number of connections defines the maximum number of client connections allowed per servant. The value range is 1-256. The default value is 256.

Maximum number of processes defines the maximum number of servant processes the master server will launch. The value range is 1-40. The default is 40.

The GUI does not allow you to type in illegal values.

Cryptographic library

SSH Tectia Server can be operated in FIPS mode, using a version of the cryptographic library that has been validated according to the Federal Information Processing Standard (FIPS) 140-2. In this mode, the cryptographic operations are performed according to the rules of the FIPS 140-2 standard.

Select the Operate in FIPS Mode check box to use the FIPS-certified version of the SSH cryptographic library. Clear the check box to use the standard (default) SSH cryptographic library.

[Note]Note

Setting the FIPS mode does not prevent using algorithms from crypto plugins. For example, CryptiCore can be used even when the main crypto library is set in the FIPS mode. To enforce that only FIPS-compliant algorithms are used, disable the non-FIPS algorithms from the configuration. See Parameters.

[Note]Note

The server has to be restarted after changing the FIPS-mode setting.

Banner message file

To define a banner message file, click the ellipsis (...) button on the right-hand side of the text field. The Select File dialog appears, allowing you to specify the desired file. You can also type the path and filename directly into the text field.

The message file is sent to the client before authentication. Note, however, that the client is not obliged to show this message.

Login grace time

Specify a time after which the server disconnects if the user has not successfully logged in. If the value is set to 0, there is no time limit. The default is 600 (seconds).

User configuration directory

Specify a path to user-specific public-key configuration data. With this, the administrator can control those options that are usually controlled by the user. This is given as a pattern string which is expanded by SSH Tectia Server.

The following pattern strings can be used:

  • %D or %homedir% is the user's home directory

  • %U or %username% is the user's login name

    For Windows domain users, these strings are substituted differently:

    • %U is expanded to domain.username

    • %username% is expanded to domain\username

  • %username-without-domain% is the user's login name without the domain part.

The default is %D/.ssh2, which expands to %USERPROFILE%\.ssh2 (usually "C:\Documents and Settings\<username>\.ssh2").