tree 0fcd8e2a690b2a79592c5b28be6ffb7042bbd4ed
parent db930bd5c7770dccd94411bee04a3b84e29e8f3e
author Christian Aistleitner <christian@quelltextlich.at> 1588324364 +0200
committer Luca Milanesio <luca.milanesio@gmail.com> 1591409626 +0100

Close open SSH connections upon account deactivation

Deactivating an account prohibits logging in on new SSH connections.
But it did not close already open connections (which may be kept open
long into the future as for example stream-events) and did not
prohibit opening new sessions on existing authenticated connections.

By closing all open sessions for a user upon deactivation, we force the
user through authentication again. Thereby, we lock out inactive users,
as this authentication will fail as the account is now inactive.

Change-Id: Icbe6f04a96297ee7d7e3748562a3f95206fb9ed2