topic Re: Security on HP-UX in Operating System - HP-UX

Security on HP-UX

carl airiel — Tue, 27 Dec 2005 22:32:05 GMT

Do you know any updates on how to make an HP-UX 10.20 and 11i a secured server.Does it support SSh and SFTP.

Regards,
Allan

Re: Security on HP-UX

Arunvijai_4 — Tue, 27 Dec 2005 22:35:43 GMT

Hi Allan,

Yes, HP-UX 10.20 and 11i both supports SSH and SFTP. All you have to do is, download Secure Shell depot from http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA
and install on it your server.

-Arun

Re: Security on HP-UX

carl airiel — Tue, 27 Dec 2005 22:55:30 GMT

Can I download this for free?Do you know any security software that are freewares?Where can I find those apps? thanks

Re: Security on HP-UX

Arunvijai_4 — Tue, 27 Dec 2005 23:00:39 GMT

Hi Again,

Secure shell is free to download from software.hp.com and many other security products are available for download as well, but some of them are $$$..

http://h20293.www2.hp.com/portal/swdepot/displayProductsList.do?category=ISS

My recommendations are,

Secure shell
Open SSL
IPSec
Kerberos
PAM Kerberos
etc.. etc..

-Arun

Re: Security on HP-UX

Arunvijai_4 — Tue, 27 Dec 2005 23:18:42 GMT

Also, Internet Express contains many security tools as well, You can download for free from

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

Some tools included in Internet express are,

Clam AntiVirus
CyrusSASL
Ethereal, TCPDUMP -- Network Packet analyzers
GnuPG
Nessus
PAM_mkhomedir
PAM_passwdqc
Snort
SSLDUMP
Stunnel
Sudo

-Arun

Re: Security on HP-UX

Joel Girot — Thu, 29 Dec 2005 02:44:51 GMT

Hi Allan,
If your hpux server is untrusted, you can convert to a trusted system.
If you do not wish to use trusted system, you can install HP-UX shadow password as an intermediate step to hide password in /etc/shadow that is root read only.
see this link : http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword
Rgds,
Joel

Re: Security on HP-UX

Muthukumar_5 — Thu, 29 Dec 2005 02:54:52 GMT

You can turn your machine to trusted one to make security to system.

Yes, SSH and SFTP is supported. You can download from

http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-4.2p1/

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

-Muthu

Re: Security on HP-UX

Muthukumar_5 — Thu, 29 Dec 2005 02:57:53 GMT

Security products in hp-ux,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=581965

-Muthu

Re: Security on HP-UX

Joel Girot — Thu, 29 Dec 2005 03:25:40 GMT

Also, HPUX Bastille (free) can give you a report of recommendations. See : http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6849AA
Joel

Re: Security on HP-UX

Robert Fritz — Wed, 04 Jan 2006 14:13:34 GMT

Bastille can configure the server and it has an educational and easy-to use GUI, though the reporting feature in bastille-linux hasn't yet been ported to HP-UX.

Additionally, with 11.23 and up, it can be set up to run at OS-installation time.