topic PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS in Operating System - OpenVMS

PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Ana M. García Olivencia — Wed, 24 Sep 2008 10:39:10 GMT

Hi all.

I am trying to enable public-key authentication in some OpenVMS 8.3 systems (TCPIP v5.6, eco2). I am following all the steps from "HP TCP/IP Services for OpenVMS Guide to SSH" but it doesn't work.

The only difference is that, instead of generating the pair of keys with OpenVMS 'ssh-keygen' utility, I am copying the public key generated from a Linux system. I think that this is supported, but I am not sure.

If it's necessary, I can post the result of 'ssh -v username@nodo.domain' execution, but, firt of all, I'd like somebody could confirm that.

Thanks in advance.

Ana

Re: PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Martin Vorlaender — Wed, 24 Sep 2008 11:00:28 GMT

Ana,

OpenSSH-based systems - like the typical Linux system - use their own file format for SSH keys.

Before transferring the public key to the VMS system, you have to convert it using

% ssh-keygen -e -f public_key > vms_format_public_key

HTH,
Martin

Re: PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Duncan Morris — Wed, 24 Sep 2008 11:05:43 GMT

Ana,

you need to convert the Linux key to the OpenSSH format.

See this thread

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1046511

Duncan

Re: PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Duncan Morris — Wed, 24 Sep 2008 11:21:04 GMT

Martin - thanks, I misread the direction for the key conversion.

-e is the correct flag.

Duncan

Re: PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Ana M. García Olivencia — Wed, 24 Sep 2008 11:42:48 GMT

Martin, Duncan.

Thanks for your replies. I have done the conversion and it works ok.

Regards.

Ana

Re: PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Ana M. García Olivencia — Wed, 24 Sep 2008 11:45:15 GMT

Problem solved.
Ana

Re: PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Hoff — Wed, 24 Sep 2008 12:39:37 GMT

I beg to (politely) differ.

The problem is not solved; a step was missed.

That step? Using the documentation email contact or the support center and reporting the documentation error!

Now as to whether HP might update the documentation, that's another matter and for HP to decide.

Re: PROBLEMS ENABLING PUBLIC-KEY AUTHENTICATION IN OPENVMS

Ana M. García Olivencia — Wed, 24 Sep 2008 13:07:33 GMT

Hoff.

You are right, but my experience in similar things is that it will be useless. Anyway, I'll send a mail to report the missing information.

Thanks.

Ana