SSH on VMS7.3-2

[Shukri Dalloul]

I have just installed VMS V7.3-2 on an Alpha 1000A system. I have next to zero SSH experience. The TCPIP$CONFIG does not appear to setup SSH correctly. For example, if fails to generate any of the files that the VMS documentation says it will. None of the SSH utilities work (SSH_KEYGEN, SSH_ADD, SSH_AGENT). For example running SSH_KEYGEN generates the following error:

ssh_userfile_stat with uid 65540
Non-specific fatal error condition

I am sure I am missing something! So, any help would be appreciated.

Thanks, Shukri

[Mic V.]

Unfortunately, I haven't done ssh on VMS and don't currently have a system to test with. But these links might point you to some help:

http://groups.google.com/groups?q=ssh&meta=site%3Dgroups%26group%3Dcomp.os.vms

http://66.102.7.104/search?q=cache:-Vj44HzZD0cJ:h71000.www7.hp.com/openvms/products/ssh/ssh.pdf+%22OpenVMS+Guide+to+SSH%22&hl=en&ie=UTF-8

HTH,
Mic

[Shukri Dalloul]

Thanks for replying to my inquiry. Unfortunately, I still have not been able to resolve this issue!

Thanks again, Shukri ...

[Mic V.]

Hi, Shukri,

Thank you for replying! I always feel happier about replying when I know someone saw it.

Did you provide any arguments to the SSH_KEYGEN program? Sorry, I should have noticed this sooner. Where I've used ssh (other platforms), it's typically something like:

ssh-keyge -t rsa

to generate RSA2 keys.

By the way, one way to "thank" people in the forums might be to assign points to them. :) There's no obligation to do it, however. Here's what HP has to say:

http://forums1.itrc.hp.com/service/forums/helptips.do?#28

Best wishes,
Mic

[Shukri Dalloul]

Hi Mic,

You can tell I'm new to this! I have tried assigning points and all I get is an acknowledgement message!

I tried running the SSH_KEYGEN utility with the keys you provided SSH_KEYGEN -t rsa and I get the following error:


FATAL: ssh_userfile_open: using non-current uid but not initialized (uid=65540, path=/etc/
ssh2/ssh2_config)

Non-specific fatal error condition


What is the uid reference? Is SSH_KEYGEN trying a path in the format /etc/ssh2 ...?

Thanks again for your help, Shukri ...

[Mic V. · Accepted solution]

Hmmm. That error message doesn't ring a bell at all. I did google for ssh_userfile_stat and came up with some source code including the message, but didn't take more than a preliminary look at it.

Here's more stuff I found in case it helps. I have to say, now I'm really curious. :)

http://www-ssrl.slac.stanford.edu/computing/CNG/SSRLONLY/SSH_ON_VMS.HTMLX

http://vms.process.com/ftp/ssh/docs/html/Ch2.htm

http://vms.process.com/ftp/ssh/docs/html/Ch2.htm

Without feeling like I can necessarily solve the original problem, have you tried an SSH from another source? Just a thought.

As far as the points, I think what you need to do is make sure you're "logged in" (it will say "Welcome, Shukri Dalloul" in the left-hand column). There's a link in the left-hand column of itrc.hp.com that lets you log in. When you've done that, I think that if you navigate to the question, you should be able to assign points.

It's not a big deal to me, but it does sometimes make people more interested in helping, like that carrot dangled under the nose. :)

Mic

[Shukri Dalloul]

Hi Mic,
Well, there is a drop down menu to assign points that must be filled before assigning points! (right there in front ...)

Thanks for you last reply, it has pointed me to a document I haven't seen before. I will read it and see if there is anything in it that is new. I have tried a vendor supplied SSH and it works but it is too expensive. I also tried OpenSSH and it works. However, the OpenVMS SSH is my favorite option (if I can get to work). I have downloaded some source code of the Internet to try to understand what is going on. My inclination is that I have missed a step during the installation process.

Thanks again for your help, Shukri ...

[BR754460]

you may want to ask in the VMS forum
http://forums1.itrc.hp.com/service/forums/familyhome.do?familyId=288
as that's where the people who have done this are found.

See also
http://h71000.www7.hp.com/openvms/security.html#ssl
http://h71000.www7.hp.com/doc/732final/AA-RSCVB-TE/AA-RSCVB-TE.html
http://h71000.www7.hp.com/doc/732final/aa-rvbua-te/aa-rvbua-te.html