topic SSH Software in Operating System - HP-UX

SSH Software

Victor Vitug — Sat, 13 Mar 2004 08:55:38 GMT

Where can I get SSH for my HPUX 11.0 systems?

Re: SSH Software

Michael Schulte zur Sur — Sat, 13 Mar 2004 09:44:06 GMT

Hi,

if you do not have the application cds,
you can download it from here:
http://software.hp.com/portal/swdepot/displayProductsList.do?category=ISS

greetings,

Michael

Re: SSH Software

Patrick Wallek — Sat, 13 Mar 2004 10:08:13 GMT

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Re: SSH Software

The Real MD — Mon, 15 Mar 2004 07:22:20 GMT

The original is at

http://www.openssh.org

the HP's version is

http://www.software.hp.com/portal/swdepot/searchProducts.do

Regards

Martin.

Re: SSH Software

Alzhy — Mon, 15 Mar 2004 10:02:00 GMT

Opt for the HP version from software.hp.com (just search for "Secure Shell").. You will also need the KRNG package...

Re: SSH Software

Steven E. Protter — Mon, 15 Mar 2004 10:32:36 GMT

As Nelson says, when available go with depots. HP commonly catches and fixes bugs not fixed in the source. Its also easier to know what is installed on your box if its in the SD/UX database.

SEP

Re: SSH Software

Alzhy — Mon, 15 Mar 2004 10:36:04 GMT

Right... for all the critical Open Source software (ie. ssh, tcp-wrappers, sudo, ssl, etc.).. I have all but stopped building these tools myself and now have totally relied on HP built - releases.

Re: SSH Software

H.Merijn Brand (procura — Mon, 15 Mar 2004 10:47:06 GMT

To make an easy summary from what's told above:

1. get openssl from http://hpux.connect.org.uk/hppd/hpux/Languages/openssl-0.9.7c/
2. get openssh from http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-3.7.1p2/
3. install them

# swinstall -s /tmp/openssl-0.9.7c-sd-11.00.depot openssl
# swinstall -s /tmp/openssh-3.7.1p2-sd-11.00.depot openssh

you might also need zlib (http://hpux.connect.org.uk/hppd/hpux/Misc/zlib-1.2.1/)

If you want to follow the openssl standards on 11.00 even more, go fetch and install /dev/random from http://freshmeat.net/projects/hpux11-random/

If /usr/local/bin not yet in your $PATH

# perl -pi -e's{:?$}{:/usr/local/bin}' /etc/PATH

# cd /usr/local/etc/openssh
# /usr/local/bin/ssh-keygen -t dsa -N "" -f ssh_host_dsa_key
# /usr/local/bin/ssh-keygen -t rsa -N "" -f ssh_host_rsa_key
# /usr/local/bin/ssh-keygen -t rsa1 -N "" -f ssh_host_key

If you want X11 support over SSH:

# perl -pi -e's/^#?X11Forwarding no/X11Forwarding yes/' sshd_config

If you don't have a ssh user (yet):

# echo 'sshd:*:22:3::/var/empty:/sbin/sh' >>/etc/passwd

Then

# mkdir /var/empty
# chmod 755 /var/empty

# /usr/local/sbin/sshd

testen met

# /usr/local/bin/ssh localhost

Enjoy, Have FUN! H.Merijn

Re: SSH Software

Alzhy — Mon, 15 Mar 2004 10:56:53 GMT

And by HP Built Releases .. I mean those available from software.hp.com AND NOT FROM THE hpux-connect web sites.

No offense to the uttelry helpful HP-UX Connect Web site but I will still prefer stuff that is HP "Official"..

Re: SSH Software

H.Merijn Brand (procura — Mon, 15 Mar 2004 11:35:03 GMT

Nelson, I get your point, but that software is also sometimes hopelessly outdated (see gzip)

Openssl/openssh is a moving target, and as we write, openssh, as available from the link I posted, is already considered 'old'. Newest openssh is 3.8p1

With the (security) bugs being fixed from the open source world, for a product that deserves its existance because of security, I prefer the builds from the HP porting center's. The people there have enough knowledge to make the best possible fit for the products they have made available for HP-UX (any version)

Enjoy, Have (secured) FUN! H.Merijn

Re: SSH Software

Brian Lucas_1 — Wed, 31 Mar 2004 16:26:36 GMT

I followed the above detailed steps (very helpful, by the way). I am having trouble logging in with this as a trusted system. When I convert it to an untrusted system, I can ssh just fine to the box. When I followed these steps I was in a trusted mode, so I added the sshd user from within SAM.

Has anyone else had this problem? I'm guessing that it's hashing the password wrong.