topic cimserver and ssh root login in Operating System - HP-UX

cimserver and ssh root login

Andrew Senior — Thu, 06 Dec 2007 14:43:04 GMT

We have a 4 node Service Guard cluster on HP-UX 11.23. No issues with the cluster but on one node
ps -aef | grep cim
root 21350 1 0 Jun 21 ? 0:24 /opt/wbem/sbin/cimserverd

On this node ssh login root works every time. On the remaining nodes
root 27350 1 0 Nov 28 ? 0:03 /opt/wbem/sbin/cimserverd
root 20970 1 0 Nov 29 ? 4:01 /opt/wbem/sbin/cimserver
root 6299 6302 1 14:40:59 pts/3 0:00 grep cim
root 20971 20970 0 Nov 29 ? 0:01 /opt/wbem/sbin/cimservera

Remote ssh login for root always produces access denied, until reset at system console. My predecessor says it is an issue with cimserver. Can anyone shed light on this please

Re: cimserver and ssh root login

Steven E. Protter — Thu, 06 Dec 2007 15:30:55 GMT

Shalom,

Probably the systems denying romote ssh login are configured that way.

To prevent remote access to root and system hacks some people configure their systems to only permit console login, which normally requires access to a secure computer room.

IT is also possible to block root login in /etc/opt/ssh/sshd_config of secure shell(ssh).

SEP

Re: cimserver and ssh root login

Andrew Senior — Thu, 06 Dec 2007 15:41:29 GMT

Steven

Once root is reset at the console this problem goes away for a period. Perhaps I ought to have added killing cimserver and cimservera (whatever that is) clears the problem. They are respawned by inittab but I don't want to tackle that till I understand the problem properly. How my ex-colleague stopped these processes respawning on the one node where they don't appear I don't know either since the cim1 entry is identical for both inittab nodes.

It is not ssh configs that are denying access.

Re: cimserver and ssh root login

Dennis Handly — Fri, 07 Dec 2007 07:50:53 GMT

>I ought to have added killing cimserver clears the problem. ... How my ex-colleague stopped these processes respawning on the one node

I just did this recently. See cimserver(1M):
# cimserver -s

cimserver(1M) also says that there are belts and suspenders and backup suspenders to keep simserver going. :-)
cimserver and cimserverd and inittab.