topic Trusted Systems with SSH in Operating System - HP-UX

Trusted Systems with SSH

Account Not Used — Wed, 18 Apr 2001 21:11:02 GMT

We are currently installing SSH 2.4.0 on a Trusted System. We are having problems do to the /tcb directories where the real passwd file is. We have called there tech. Support and have not received a workable answer as yet. They say they are aware of the problem and remember a customer who got it to work on a Trusted System on HP/UX 11.0. They are currently looking for the answer. I was wondering does anyone out there know how to get around this.
We would prefer to use this supported version of SSH rather than Open SSH even thought Open SSH seems to work. Please can someone help?

Re: Trusted Systems with SSH

Patrick Wallek — Wed, 18 Apr 2001 22:20:34 GMT

One option would be to temporarily unconvert your system so everything is back in the passwd file and then once the installation is done, convert the system back to trusted to recreate the /tcb file.

I believe tsunconvert will unconvert you and tsconvert will put you back into a trusted system. If you unconvert you will probably lose any configuration you have done as far as expiring ID's, passwords, etc. though.

Re: Trusted Systems with SSH

Account Not Used — Thu, 19 Apr 2001 15:18:44 GMT

OK we give it a shot and let you know the outcome. We were told it had to be Trusted first. Thanks "Talk to ya later" .

Re: Trusted Systems with SSH

Steven Sim Kok Leong — Thu, 19 Apr 2001 23:13:26 GMT

Hi,

Perhaps you may want to rely on older versions of SSH such as SSH 2.1.0 which has no issues with TCB.

For these older versions to work (I am not sure about SSH 2.4.0), SSH must be compiled only after the OS has been converted to trusted systems. This is because the ./configure script will check whether the system is trusted before creating the appropriate Makefile. If the OS is converted only after SSH has been compiled, SSH will not work with TCB as it has not bee compiled to work with it.

Hope this helps. Regards.

Steven Sim Kok Leong
Brainbench MVP for Unix Admin
http://www.brainbench.com

Re: Trusted Systems with SSH

Account Not Used — Fri, 20 Apr 2001 14:38:42 GMT

Steven thanks for all your input. We have trusted the system before we compiled SSH. We will try going back to an older version such as you suggested. Thanks very much fot you input. I will let you know how it turns out.

Thanks MJC

Re: Trusted Systems with SSH

Chris Calabrese — Fri, 04 May 2001 13:00:40 GMT

Also, none of the versions of *ssh I've used on 11.x with in trusted mode set the utmp/wtmp entries correctly. We're working with SSH Communications on this, but if you're using OpenSSH you could fix it yourself.

Re: Trusted Systems with SSH

Account Not Used — Fri, 04 May 2001 14:22:57 GMT

I just want to thank everyone that gave me input to my question on SSH. We are currently ruunning now sucessfully with Open SSH on four Trusted Systems HP?UX 11.0 and one NT server Service Pak 5. Thank you everyone.

MJC