SSH on VMS 7.3-2

[robert70]

I have started up SSH on VMS 7.3-2
Trying to connect with a telnet/ssh
where on the Alpha side can I find the public and private key information to enable me to connect?
thanks

[marsh_1]

there are two files that should be in an ssh2 sub directory for your username , an identification file and an authorization file

identification file contains details of your private key

e.g

idkey priv_key_name

authorization file contains public key details

e.g

key public

use the tcpip$ssh_keygen.exe to create a private/public key pair.
certainly putty generated public keys can be used without issue and should be in the same ssh2 sub directory.
all 3 methods hostbased/public key and password can be enabled/disabled in the ssh conf files for client and server in the tcpip$ssh directory.

also obviously see the tcpip guide to ssh on the hp site

good luck

[Steven Schweda]

> Trying to connect with a telnet/ssh

From what? To what? Do you already have
keys somewhere? (Where?)

> also obviously see the tcpip guide to ssh
> on the hp site

Yup. Need directions?

[Hoff]

Some reading:

http://64.223.189.234/node/1118

But do start with the HP manual for ssh. ssh starts out a little weird, and the HP OpenVMS port layers another helping or two of weirdness into the baseline ssh weird.

[marsh_1]

steven,

the link to the hp vms manuals is on the forum web page you don't need directions to get where you're already at :-)

[Hoff]

While the following was clearly intended as a joke:

>the link to the hp vms manuals is on the forum web page you don't need directions to get where you're already at :-)

I can assure you that such is *not* a universal finding.

Further, the sheer scale and relative lack of indexing of the existing resources (manuals, help, the HP web site, the stuff in or disappeared from the support databases) is an increasing problem for inexperienced users. (I *know* where this stuff is and I've read much of it over the years and I've written some of it, and it can sometimes take me a while to find a reference.)

[robert70]

my keys dont get made when i select enable and start service on node (ssh)
any help?




SSH configuration options:

1 - Enable service on this node

2 - Enable & Start service on this node

[E] - Exit SSH configuration

Enter configuration option: 2
* Create a new default server host key? [YES]:
Creating private key file: TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2]HOSTKEY
Creating public key file: TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2]HOSTKEY.PUB
%NONAME-F-NOMSG, Message number 0764CFBC
%TCPIP-I-INFO, image SYS$SYSTEM:TCPIP$SSH_SSHD2.EXE installed
%TCPIP-I-INFO, image SYS$SYSTEM:TCPIP$SSH_SFTP-SERVER2.EXE installed
%TCPIP-I-INFO, logical names created
%TCPIP-I-INFO, service enabled
%TCPIP-S-STARTDONE, TCPIP$SSH startup completed

[robert70]

the service is enabled but never started and there are no PUB keys in the directory?

[Steven Schweda]

alp $ sysmsg %x0764CFBC
(SYS$COMMON:[SYSMSG]TCPIP$MSG.EXE;1:)
%TCPIP-F-SSH_FATAL, non-specific fatal error condition

Not very informative, I'd say.

> [...] there are no PUB keys in the
> directory?

You're SYSTEM when you do this stuff? Do the
directory protections and owner look
reasonable? I haven't made any host keys in
a while, but around here:

ALP $ dire /owne /prot /size TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2]host*

Directory SYS$SYSDEVICE:[TCPIP$SSH.SSH2]

HOSTKEY.;1 2 [TCPIP$AUX,TCPIP$SSH] (RWD,RWD,,)
HOSTKEY.PUB;1 2 [TCPIP$AUX,TCPIP$SSH] (RWD,RWD,R,R)
HOSTKEYS.DIR;1 1 [TCPIP$AUX,TCPIP$SSH] (RWE,RWE,RE,E)

Total of 3 files, 5 blocks.


You might try moving/removing the whole mess,
and starting fresh. Otherwise, I'd probably
start dissecting TCPIP$CONFIG.COM to see
what it's trying to do when it goes bad.

[robert70]

i am running this under SYSTEM yes.
the directory is TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2]but as i say the HOSTKEY.PUB is not created because of that error message.