cimserver and ssh root login

[Andrew Senior]

We have a 4 node Service Guard cluster on HP-UX 11.23. No issues with the cluster but on one node
ps -aef | grep cim
root 21350 1 0 Jun 21 ? 0:24 /opt/wbem/sbin/cimserverd

On this node ssh login root works every time. On the remaining nodes
root 27350 1 0 Nov 28 ? 0:03 /opt/wbem/sbin/cimserverd
root 20970 1 0 Nov 29 ? 4:01 /opt/wbem/sbin/cimserver
root 6299 6302 1 14:40:59 pts/3 0:00 grep cim
root 20971 20970 0 Nov 29 ? 0:01 /opt/wbem/sbin/cimservera

Remote ssh login for root always produces access denied, until reset at system console. My predecessor says it is an issue with cimserver. Can anyone shed light on this please

[Steven E. Protter]

Shalom,

Probably the systems denying romote ssh login are configured that way.

To prevent remote access to root and system hacks some people configure their systems to only permit console login, which normally requires access to a secure computer room.

IT is also possible to block root login in /etc/opt/ssh/sshd_config of secure shell(ssh).

SEP

[Andrew Senior]

Steven

Once root is reset at the console this problem goes away for a period. Perhaps I ought to have added killing cimserver and cimservera (whatever that is) clears the problem. They are respawned by inittab but I don't want to tackle that till I understand the problem properly. How my ex-colleague stopped these processes respawning on the one node where they don't appear I don't know either since the cim1 entry is identical for both inittab nodes.

It is not ssh configs that are denying access.

[Dennis Handly]

>I ought to have added killing cimserver clears the problem. ... How my ex-colleague stopped these processes respawning on the one node

I just did this recently. See cimserver(1M):
# cimserver -s

cimserver(1M) also says that there are belts and suspenders and backup suspenders to keep simserver going. :-)
cimserver and cimserverd and inittab.