topic Re: Secure Shell and Kerberos in Operating System - HP-UX

Secure Shell and Kerberos

charlie_bulosan — Tue, 16 Jan 2007 06:05:08 GMT

Hi All,

We are currently using Secure Shell for external transactions such as sftp. We have not really implemented Secure Shell for internal use.

The Secure Shell configuration is we are acting only as a ssh client. I think they're using Host-Based Authentication.

We are planning to implement ssh on all our unix servers initially. And then integrate it with Kerberos for better security and single sign on.

My queries are :
1) Is it possible to implement ssh on all the unix servers for all their users in it, using Public-Key authentication, and bypass the current (in production) ssh configuration for a certain ordinary user?
2) What are your comments on using Secure Shell and Kerberos Authentication?

Many Thanks,
Charlie

Re: Secure Shell and Kerberos

Peter Godron — Tue, 16 Jan 2007 06:20:14 GMT

Charlie,
The following threads should get you started:
https://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=980805
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1076369

You probably already have a copy, but anyway:
http://docs.hp.com/en/T1471-90014/index.html

Re: Secure Shell and Kerberos

Peter Godron — Thu, 18 Jan 2007 10:27:32 GMT

Hi,
could you please update the thread. How are you getting on ? Were my suggestions of any use ?

If the problem is resolved, could you please complete the thread by awarding points to helpful answers and summarising the solution for you.
This will help resolution of similar problems in the future.

Re: Secure Shell and Kerberos

charlie_bulosan — Thu, 18 Jan 2007 11:32:32 GMT

Hi Peter,

Thanks for the links provided as they are quite helpful.

I've asked HP about item 1 and they said it is possible to bypass the current ssh config of the user. The user is using Host Based authentication.

Many Thanks,
Charlie