topic Re: Implementing secure shell in Operating System - HP-UX

Implementing secure shell

KRS_1 — Fri, 20 May 2005 12:37:58 GMT

Hi all,

I would like to implement secure shell.

let me know all steps related to secure shell.

Thanks and regards
Raj

Re: Implementing secure shell

Robert Bennett_3 — Fri, 20 May 2005 12:53:18 GMT

Install secure shell on 2 servers ( ex. HOME and REMOTE)

a. Edit the /opt/ssh/etc/ssh_config file, change the following keyword to the example.

Protocol 2,1

b. Edit the /opt/ssh/etc/sshd_config file, change the following keywords or uncomment the keywords as listed below.

Protocol 2,1
HostKey /opt/ssh/etc/ssh_host_key
HostKey /opt/ssh/etc/ssh_host_rsa_key
HostKey /opt/ssh/etc/ssh_host_dsa_key
PermitRootLogin yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
RhostsAuthentication no
IgnoreRhosts yes
PermitEmptyPasswords no
X11Forwarding no

c. Establish the root trust from HOME to the root account REMOTE.

on REMOTE
cd /roots/.ssh
scp HOME:/roots/.ssh/id_rsa.pub ./id_rsa.pub.HOME
cat id_rsa.pub.HOME >> authorized_keys

d. Test the trusted login ability of root on HOME

root@HOME# ssh REMOTE

if the login was successful without a password the configuration is complete.

This should get you going to set up ssh for root between 2 servers. just repeat the procedure for any other REMOTE server.

Re: Implementing secure shell

Volker Borowski — Fri, 20 May 2005 13:00:40 GMT

... and if you need ssh-client on windows, use putty !
Volker

Re: Implementing secure shell

Rouchon_2 — Fri, 20 May 2005 13:26:40 GMT

if you only need secure shell and not trusted systems and rlogin without password. there is only 2 steps.

- Install latest ssh package
- disable unsecure shell (telnet)

Enjoy.

I also recommend to install with ssh tcpwrapper to be able to refuse connection based on IP of requestor.

Permit Root login is not recommended just secure shell with a normal user and su in your shell. Because root is a well known account name. this will disallow bruteforce Cracking.

Re: Implementing secure shell

Sanjay_6 — Fri, 20 May 2005 13:59:23 GMT

Hi Raj,

Try this link,

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Check out the release notes link.

Hope this helps.

Regds

Re: Implementing secure shell

Nguyen Anh Tien — Fri, 20 May 2005 22:22:36 GMT

docs is available at
http://docs.hp.com/en/T1471-90008/index.html
installation at:
http://docs.hp.com/en/T1471-90008/ch01s07.html

Re: Implementing secure shell

Sยภเl Kย๓คг — Sat, 21 May 2005 02:20:31 GMT

You need to install the Secure Shell application, either from the application CD or download the bundle from site. This won't be installed by default on an HP UX installation.
Under /etc/opt/ssh you can find the configuration files and do the appropriate modifications to tune for your requirements.

After modifications u need to kill /opt/ssh/sbin/sshd process and restart it to reflect the changes..

Regards,
SK

Re: Implementing secure shell

KRS_1 — Sat, 11 Jun 2005 20:24:30 GMT

Thank you guys