hp9000system Container SSHD not answering

[JoyOrton]

I've just created an hp9000system container from an 11.11 PARSC image.

The IP Addresses look OK.

I can ping the secondary. and from the container I can ping the gatway. and I can ssh to the host server from the container.
Oustide systems can ping the secondary IP.

ssh doesn't connect from the host system or outside systems to the container.(srp_su works fine)

It tries. It gives me the key update message and then times out.

I've tried to find documentation on this without success.

bash-4.2# srp_sys -l
Checking SRP core subsystems ...                            [ OK ]
Checking compartment login feature ...                      [ OK ]
Checking PRM service ...                                    [ OK ]
Checking IPFilter module ...                                [ Not Enabled ]
Checking IPsec module ...                                   [ Not Installed ]
Checking sshd configuration ...                             [ OK ]
bash-4.2#
bash-4.2# netstat -rn
Routing tables
Destination           Gateway            Flags Refs Interface  Pmtu
127.0.0.1             127.0.0.1          UH    0    lo0       32808
10.114.197.7          10.114.197.7       UH    0    lan900:1  32808
10.114.197.6          10.114.197.6       UH    0    lan900    32808
10.114.197.0          10.114.197.6       U     3    lan900     1500
10.114.197.0          10.114.197.7       U     3    lan900:1   1500
127.0.0.0             127.0.0.1          U     0    lo0       32808
default               10.114.197.1       UG    0    lan900:1   1500
default               10.114.197.1       UG    0    lan900     1500
bash-4.2#
inside the container:

# netstat -rn
Routing tables
Destination           Gateway            Flags Refs Interface  Pmtu
127.0.0.1             127.0.0.1          UH    0    lo0       32808
10.114.197.7          10.114.197.7       UH    0    lan900:1  32808
10.114.197.0          10.114.197.7       U     3    lan900:1   1500
127.0.0.0             127.0.0.1          U     0    lo0       32808
default               10.114.197.1       UG    0    lan900:1   1500
#
# ps -ef |grep ssh
    root 22254     1  0 20:11:30 ?         0:00 /opt/ssh/sbin/sshd
    root 23114 22254  0 20:35:56 ?         0:00 sshd: [accepted]
    sshd 23115 23114  0 20:35:56 ?         0:00 sshd: [net]
    root 23118 22977  4 20:36:22 pts/0     0:00 grep ssh
#
$ ssh -l jorton 10.114.197.7
The authenticity of host '10.114.197.7 (10.114.197.7)' can't be established.
RSA key fingerprint is ca:fd:17:a3:1d:76:a8:d2:df:59:fd:14:94:f0:86:44.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.114.197.7' (RSA) to the list of known hosts.
Connection closed by 10.114.197.7

$ ssh -l root 10.114.197.7
Connection closed by 10.114.197.7

[NitinD]

Have you referred the "HP 9000 Containers Admin guide"? if not please use this link to get it : HP 9000 Containers Admin Guide

Chpater 12: HP 9000 Containers Troubleshooting ->Triaging HP 9000 container access issues

After following this if it does not resolve, please take tusc logs on sshd process.

Regards

Nitin

HP 9000 Containers R&D

[malc_p]

Hi
I had that last week, and fixed it by altering the file /etc/opt/ssh/etc/sshd.config; setting "KerberosAuthentication no" and "UsePAM yes", then restarting SSH with "/sbin/inet.d secsh stop" and "start".
What the implications are for system security I'm not sure, but it fixed it for me!