topic Re: ssh in Operating System - HP-UX

ssh

khilari — Sun, 22 Oct 2006 19:53:47 GMT

Hi people, well i wanted to know as to how do u configure ssh on your local hp-ux system.And secondly, how have your experience have been as one using it over traditional telnet. Lastly, does sftp work on the same rules as ssh.
Thanks

Re: ssh

IT_2007 — Sun, 22 Oct 2006 19:58:44 GMT

Install ssh product from HP portal site and then look at /etc/sshd/sshd_config file to configure. Usually, root is not allowed to login remotely other than console. Otherwise standard configuratin should work to login by users.

scp is a subsystem on sshd_config. It works same as ssh. This is a secure file transfers.

Once you install and config ssh then you can disable telnet and ftp services.

Re: ssh

Yogeeraj_1 — Mon, 23 Oct 2006 03:52:44 GMT

hi,

attached one great document that i use as reference: Using H/P's Secure Shell & Secure Copy by chris vail

hope this helps!

kind regards
yogeeraj

Re: ssh

Yogeeraj_1 — Mon, 23 Oct 2006 03:53:50 GMT

hi,

attached one great document that i use as reference: Using H/P's Secure Shell & Secure Copy by chris vail

hope this helps!

kind regards
yogeeraj

Re: ssh

Ralph Grothe — Mon, 23 Oct 2006 05:30:31 GMT

Use the official HP-UX port of OpenSSH, which HP call "Secure Shell"

# swlist|grep -Ei secure.?shell
T1471AA A.03.61.002 HP-UX Secure Shell

You can download it for free from software.hp.com (fill in the search input field to find the exact URL),
but you will also find it on HPs' Application CDs.
Installation is as easy as the usual swinstall.
Installation scripts of the depot will automatically produce host keys.
The basic configuration file, which you find after installation in /opt/ssh/etc/sshd_config
requires little to no adaptation.
The depot also installs init script with rc.config.d file, and sets symlinks.
Thus, you merely need to run "/sbin/init.d/secsh start",
if some postinstall procedure hasn't done so already.

Yes, ssh is a much better replacement for telnet and the r* commands.
HP have patched most of their relevant products that formerly required r* commands in trusted hosts environments (like ServiceGuard or bootsys from Ignite) to tolerate SSH RSA key authorized logins.
Thus, you will hardly need the old commands anymore.

Re: ssh

Ralph Grothe — Mon, 23 Oct 2006 05:33:42 GMT

Forgot, the manpages that the Secure Shell accompny are an excellent reference (and usually the only one I mostly need).
Especially the man sshd_config explains all possible settings.

Re: ssh

Steven E. Protter — Mon, 23 Oct 2006 05:54:03 GMT

Shalom,

I agree the sshd_config file is one of the better english language documentation configuration files around.

Picking your ssh/secure shell release is important. Recent releases have had some rather rough security problems and fuctionality bugs.

http://software.hp.com

SEP