topic Re: SSH question in Operating System - HP-UX

SSH question

de049 — Tue, 04 Nov 2008 09:17:23 GMT

Hi all,

Before you all start pulling yer hair out with my question, let me start by saying i'm new to HP-UX and SSH so need to get a simple answer before considering the technical approach to my problem.

Basically, i want to get my HP-UX server working on SSH from remote access as opposed to telnet access as has been the case until now.

I have found hundreds of threads and papers that have simply blown me away. Can someone offer a simple, 2D response to the following (before looking at what needs to be installed, setup etc.

I wish to setup SSH whereby users are always asked the passwords, no keys required i guess, right? Therefore, whats the easiest way to setup SSH on my HP-UX 11.i server?

My knowledge of installing stuff on this OS is also basic, so please bet gentle and the more "For Dummies" approach you take to educate me the better :-)

Hoping someone finds the patience......

A Million thanks!

Dwayne

Re: SSH question

Amarnath D — Tue, 04 Nov 2008 09:26:48 GMT

Hi Dwayne,

Can i know what SSH application your are using is OpenSSH or Tectia or any other?

Cheers,
Amar

Re: SSH question

Danny Petterson - DK — Tue, 04 Nov 2008 09:33:14 GMT

Go to this site:

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

...and download ssh if you dont already got it.

And instead of reinventing the wheel. I will refer to this document:

How to install:
http://docs.hp.com/en/5992-4213/ch02s02.html#babcefha

...and the entire document:
http://docs.hp.com/en/5992-4213/index.html

You dont have to read on all the configuration-things, just concentrate on how to install.

When its done, test it. If it works, disable ftp, telnet rlogin etc. in /etc/inetd.conf (by marking those lines out with a #), and restarting the inetd (/sbin/init.d/inetd stop and then /sbin/init.d/inetd start). This will prevent use of those unsecure services. BUT - remember to take a copy of /etc/inetd.conf before you do the changes, then you will have a chance to roll back if something fails.

Please, just ask here if you got any additional questions.

Re: SSH question

de049 — Tue, 04 Nov 2008 09:35:36 GMT

Hi guys,

Thanks for the very prompt response. Basically, to answer the 1st question, i am using either Putty or an application we use in house called Reflection.

With regards the rest, i take it there's no way of setting up SSH without installing stuff, correct? Its not as straight forward as connecting from any remote PC via telnet.

Darn! I'll give your recommendations a try anyway.

thanks laods

Re: SSH question

Ivan Krastev — Tue, 04 Nov 2008 09:35:50 GMT

And for disabling key authentication set this to NO:
PubkeyAuthentication NO

http://www.docs.hp.com/en/5992-4213/apas02.html#v1230053

regards,
ivan

Re: SSH question

de049 — Tue, 04 Nov 2008 09:57:31 GMT

Guys,

i've installed and tested it. It connects PERFECTLY now. Million thanks for doing just what i pledged for - simple explanation of my problem.

I really appreciate this. I was always looking much deeper and thats why i think i kept getting overwhelmed and lost.

I shall now proceed to blocking other forms of access as recommended.

Thanks again guys ;-)

Dwayne

Re: SSH question

Dennis Handly — Tue, 04 Nov 2008 10:11:08 GMT

>Thanks again guys ;-)

If their answers were helpful, please read the following about assigning points:
http://forums.itrc.hp.com/service/forums/helptips.do?#33

Re: SSH question

de049 — Tue, 04 Nov 2008 10:18:01 GMT

Ok, i've just tried to # out the telnet option in my /etc/inetd.conf file, then stop and start the service, but everytime i vi the file again to check it, the # is not stored infront of the telnet line. I am sure i'm saving the file ok using either ZZ or :w!

ANy advice? I have tested via telnet and still connect.

thanks

Re: SSH question

Danny Petterson - DK — Tue, 04 Nov 2008 10:21:45 GMT

Hi - when you save in vi, after changing the files
Press ESC
:x!

then you write and exit

Re: SSH question

Suraj K Sankari — Tue, 04 Nov 2008 10:41:40 GMT

Hi,

Or you can use
Hit Esc
then
:wq!

Suraj

Re: SSH question

de049 — Tue, 04 Nov 2008 10:47:26 GMT

strange, tried all those but still it wont stick.

Why when i do a CAT on inetd.conf i get a different content to VI inetd.conf?

If i do CAT i see no TELNET entries listed. If i do VI, i see telnet but i always loose the # i put infront of it.

thanks

Re: SSH question

Suraj K Sankari — Tue, 04 Nov 2008 10:55:06 GMT

Hi,

Please set your terminal.
can you post your .profile
I think due to terminal setting you are facing this problem.

Suraj

Re: SSH question

Danny Petterson - DK — Tue, 04 Nov 2008 10:59:20 GMT

Yeah, as stated above, let us know your term:

echo $TERM

and lets see your profile:
cat ~/.profile

Re: SSH question

de049 — Tue, 04 Nov 2008 11:03:39 GMT

echo $TERM = vt220

profile = export TERM

EDITOR=vi
export EDITOR

fi # if !VUE

# Set up shell environment:

set -u # error if undefined variable.
trap "echo 'logout root'" 0 # what to do on exit.

# Set up shell variables:

MAIL=/var/mail/root
# don't export, so only login shell checks.

echo "WARNING: YOU ARE SUPERUSER !!\n"
# Inserted by MV38 installation
export MV38=/opt/mv38/MV38v11.3.1

Re: SSH question

Danny Petterson - DK — Tue, 04 Nov 2008 11:13:19 GMT

echo vt100 >> ~/.profile

Logout and login again - see if it helps.

Re: SSH question

Suraj K Sankari — Tue, 04 Nov 2008 11:20:16 GMT

Hi de049,

As said by Danny did you changed vt220 to vt100
if yes then tell us still you are facing problem.

Suraj

Re: SSH question

de049 — Tue, 04 Nov 2008 11:35:41 GMT

ok, yes it works now. Basically, it was a combo of the VT terminal and the fact my client software wasn't fully displaying the exact content. I adjusted the terminal rows and all is now displayed via CAT and VI identically.

Thanks guys. You've been incredible!!!

Re: SSH question

Suraj K Sankari — Tue, 04 Nov 2008 12:12:36 GMT

Hi Dwayne,

KEEP ASSIGNING POINTS TO THOSE WHO SPEND THEIR VALUABLE TIME FOR YOU.

http://forums11.itrc.hp.com/service/forums/helptips.do?#33

Suraj

Re: SSH question

Danny Petterson - DK — Tue, 04 Nov 2008 12:34:44 GMT

Easy Guys, Im sure Dwayne will, he just needs to get his work done first - Im sure we can wait, its not that important :-)

Take care everybody
Yours
Danny

Re: SSH question

de049 — Tue, 04 Nov 2008 15:11:29 GMT

Dont worry i will assign the much deserved points right away.

One last thing. ever since i played around with the VT profile changes, i keep getting this at the prompt on first login:

# rofile[54]: vt100: not found.t220".

Before at first login i simply got the # prompt awaiting my input. Now i have to type CLEAR before being able to continue with my input.

Any ideas.

dwayne