topic Re: SSH Version A.04.20.004 in Operating System - HP-UX

SSH Version A.04.20.004

Kevin Westover — Mon, 06 Feb 2006 12:55:33 GMT

I recently installed SSH Version A.04.20.004 on an HPUX 11i server. The server had a previous version of SSH that was deemed to be insecure according to a recent bulletin from HP. After installing the new version, users cannot use passwords longer than 8 characters. Any ideas on this?

Thanks.

Kevin

Re: SSH Version A.04.20.004

Jeff_Traigle — Mon, 06 Feb 2006 12:59:53 GMT

Set KerberosAuthentication to no. Solved the problem when I upgraded from 3.61 and old to 4.00 at my previous job.

Re: SSH Version A.04.20.004

Kevin Westover — Mon, 06 Feb 2006 19:22:26 GMT

Where do I set the Kerberos Authentication? I checked the ssh_config file and didn't find anything about Kerberos. Thanks.

Kevin

Re: SSH Version A.04.20.004

Asif Sharif — Tue, 07 Feb 2006 02:10:42 GMT

Hi Kevin,
Some documentation on Kerberos on docs.hp.com

Configuration Guide for Kerberos Products on HP-UX
http://docs.hp.com/hpux/onlinedocs/J5849-90003/J5849-90003.html

Configuration Guide for Kerberos Client Products on HP-UX
http://docs.hp.com/hpux/onlinedocs/T1417-90006/T1417-90006.html

Regards,
Asif Sharif

Re: SSH Version A.04.20.004

Steven E. Protter — Tue, 07 Feb 2006 04:00:29 GMT

Shalom Kevin,

Try the sshd_config file.

I would say that if you've upgraded authentication to use Kerebos, that a step or steps in the configuration process were skipped.

SEP

Re: SSH Version A.04.20.004

Kevin Westover — Tue, 07 Feb 2006 13:11:31 GMT

Thanks for everyone's ideas on this problem. It turned out that during the install of the new version of SSH the new sshd_config file was written to an alternate location because the current sshd_config file had been modified. To correct the problem, I simply copied the new sshd_config file into /opt/ssh/etc to replace the old one. After restarting sshd, the password problem went away.

I left Kerberos at the default of "yes" and it still works fine. Thanks again for everyone's input on this.

Kevin

Re: SSH Version A.04.20.004

Kevin Westover — Tue, 07 Feb 2006 13:13:18 GMT

See previous reply for resolution. Thanks.

Kevin