topic Re: ssh and Password Authorization Number ?? in Operating System - HP-UX

ssh and Password Authorization Number ??

ballans — Tue, 04 Jan 2005 10:50:29 GMT

Hi all,
First, happy new year...
I've got a technical question about ssh and pan on HP-UX 10.20 server.
When I create a new account with SAM, the system automatically creates a unique Password Authorization Number that will be change by the new user during the first connection on this server.
Before, when the user connected for the first time to the server by telnet with his login, the system automatically ask him for the PAN, so then he could create his proper password...
But now, I want to close telnet service (in inetd) and replace it by ssh.
I've installed OpenSSH 3.9p1 with sources.
ssh server and client works well but when I connect to the server with a new account, he don't ask me for the PAN but for a password (wich doesn't exist!!).
Is there any solution ?
May I have to modify a parameter on a file system ?
Thanks in advance for your reply
Herve

Re: ssh and Password Authorization Number ??

Stephen Keane — Tue, 04 Jan 2005 11:50:26 GMT

Have you read this thread also

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=779355

Re: ssh and Password Authorization Number ??

Stuart Abramson — Tue, 04 Jan 2005 12:05:37 GMT

Do you have "Trusted System"? I think that the PAN is required by "Trusted System".

My guess would be that you have a "Trusted System" to "ssh" mismatch, if that's possible.

Re: ssh and Password Authorization Number ??

Steven E. Protter — Tue, 04 Jan 2005 12:16:07 GMT

I wasn't sure 10.20 could do trusted system. If it can (and it appears so), you may need to install pam authentication management onto 10.20.

I don't know if its available for 10.20 at software.hp.com.

I am relatively certain you can probably find the source, compile it and get it working on 10.20.

If you could see clear to upgrade the box to at least 11.00 I have confirmed that the setup you are trying will work on that platform.

I'm betting someone like Bill Hassell or others with actual access to 10.20 system can clarify or correct my supposition.

SEP

Re: ssh and Password Authorization Number ??

Steven E. Protter — Tue, 04 Jan 2005 12:18:09 GMT

If the issue is pam, its not supported on 10.20

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=73153

You still might be able to compile it and get it working well enough to enable ssh.

SEP