topic Re: Coming soon - HP-UX Secure Shell, A.03.50 in Operating System - HP-UX

Coming soon - HP-UX Secure Shell, A.03.50

Berlene Herren — Thu, 03 Apr 2003 18:20:19 GMT

Look for this new release within a week or so (hopefully) at www.software.hp.com.

HP-UX Secure Shell A.03.50 is based on OpenSSH 3.5p1, supporting 11.00, 11.11, HP-UX 11i version 1.6 (11.22). It will also be in the application release for AR0603. The previous version of HP-UX Secure Shell is based on OpenSSH 3.1p1.

Berlene

Re: Coming soon - HP-UX Secure Shell, A.03.50

Pete Randall — Thu, 03 Apr 2003 18:24:16 GMT

Berlene,

Pardon me for being way off topic here, but a question came up today that I think you'd have some insight on. Could you take a look at this thread, please?

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x8f5db82b2d63d71190080090279cd0f9,00.html

Thanks,
Pete

Re: Coming soon - HP-UX Secure Shell, A.03.50

Steven E. Protter — Thu, 03 Apr 2003 18:28:22 GMT

I'll be installing that the day its available.

SEP

Re: Coming soon - HP-UX Secure Shell, A.03.50

Berlene Herren — Thu, 03 Apr 2003 19:45:10 GMT

Then I'll be sure to broadcast it's release first thing that morning!

Berlene

Re: Coming soon - HP-UX Secure Shell, A.03.50

Kellogg Unix Team — Thu, 03 Apr 2003 20:24:30 GMT

Berlene,

Can you publish the release document prior to releasing the depot? That will help we mortals to read and get approval from management based on its advantages over present release!
:-)

...Manjeet

Re: Coming soon - HP-UX Secure Shell, A.03.50

Wodisch — Thu, 03 Apr 2003 20:55:44 GMT

Hi Berlene,

since I received the release notes for OpenSSH3.6.1 just two days ago, do you have an idea when that version would be available from HP?

TIA,
Wodisch

Re: Coming soon - HP-UX Secure Shell, A.03.50

Berlene Herren — Thu, 03 Apr 2003 21:01:40 GMT

Look how long it took to get A.03.05 :-) Actually, parts of the open source versions are not compatible or do not support HP applications, which is why the lab will wait to port a newer version to HP.

Some of the things to look forward to in this new version:

1) New functionality - Privilege separation
Privilege separation only allows operations that require special privileges to
be performed by a privileged process. By default, the privilege separation
functionality is enabled and the default UsePrivilegeSeparation value is "Yes"
in the configuration sshd_config file.

2) Enhancement - "ls" support for sftp client
It includes file name expansion and the long listing with the -l option.

3) Support for Shadow Passwords
A shadow password is a password that has been hashed using a randomly generated
key. HP-UX Secure Shell will automatically use this feature if it is enabled
on the system. Shadow password will be available at HP software depot,
http://software.hp.com.

Once the shadow password is invoked, the /etc/passwd file is updated with the
key and the /etc/shadow file is created for shadow passwords. To enable shadow
passwords, the administrator needs to execute the /usr/sbin/pwconv utility
while logged in as superuser.

4) Support for Random Number Generator
Using Strong Random Number Generator can significantly speed-up Secure Shell
random number initialization. HP-UX Strong Random Number Generator is
available for HP-UX 11.11 at:
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=KRNG11I

HP-UX Secure Shell will automatically use this feature if HP-UX Secure Shell
daemon, sshd, detects /dev/random created by Strong Random Number Generator.

5) New Variables and Default Settings

New Variables:

* PermitUserEnvironment, a server variable in sshd_config, specifies whether
~/.ssh/environment and environment= options in ~/.ssh/authorized_keys are
processed by sshd. PermitUserEnvironment is disabled by default.

* SSH_CONNECTION environment variable, set by sshd, identifies the client and
server ends of the connection by displaying:

Default Settings Changes:

* sshd_config LoginGraceTime default value changed from 1 minute to 2
minutes
* sshd_config X11Forwarding default setting is now Yes
* sshd_config X11UseLocalhost default setting is now No

6) Defect fixes:

* Changing expired passwords with sshd running in privsep mode (Bugzilla #423)
* Name space collision caused by log function (Bugzilla #484)

Berlene

Re: Coming soon - HP-UX Secure Shell, A.03.50

Yogeeraj_1 — Fri, 04 Apr 2003 05:02:29 GMT

Hi Berlene,

Looking forward to it.

Please keep us updated.

Best regards
Yogeeraj

Re: Coming soon - HP-UX Secure Shell, A.03.50

benoit Bruckert — Fri, 04 Apr 2003 07:43:54 GMT

Hi,
The 3.6.1.p1 version depot is available ...
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x476f7cffe265d711abdc0090277a778c,00.html

regards
Benoit

Re: Coming soon - HP-UX Secure Shell, A.03.50

benoit Bruckert — Fri, 04 Apr 2003 08:08:57 GMT

Oups !
Forgot to say that I had some troubles with the 3.5p1, that the latest (3.6.1p1) solved.
see :
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xaf50b82b2d63d71190080090279cd0f9,00.html

May the HP release didn't have this trouble ?

regards
Benoit

Re: Coming soon - HP-UX Secure Shell, A.03.50

Michael R. Monteith — Thu, 29 May 2003 17:02:45 GMT

I just installed Shadow Password B.01.00.00 and SSH does not appear to work with Shadow Password.

Is there some option that enables SSH to work with it?

Thanks
Michael