Couldn't connect to PRNGD socket - when logon by ssh

[Abdul Majeed Lardhi]

Hi everybody;

We are running HPUX.11.11 and HPUX 11.31
when we use ssd to connect to the servers, we getting some error or wrong :

Couldn't connect to PRNGD socket "/var/run/egd-pool": No such file or directory

the patches we have :
root:/ > swlist -l fileset|grep -i secure
NFS.KEY-CORE B.11.31 Commands to support secure RPC for NIS
# Secure_Shell A.04.40.005 HP-UX Secure Shell
Secure_Shell.SECSH-CMN A.04.40.005 Secure Shell common files
Secure_Shell.SECURE_SHELL A.04.40.005 Secure Shell
# openssl A.00.09.08d.001 Secure Network Communications Protocol

root:/ > swlist -l fileset|grep -i random
OS-Core.RNG-DKRN B.11.31 HP-UX Strong Random Number Generator

root:/ > ll /dev/ran*
cr--r--r-- 1 root sys 133 0x000000 Apr 2 15:07 /dev/random
root:/ >



Thanks

[Rasheed Tamton]

Hi,

Is prngd is started

check these files
/sbin/init.d/prngd.rc
/etc/rc.config.d/prngd

if not started change the config file /etc/rc.config.d/prngd
and restart the prngd.rc

Regards,
Rasheed Tamton

[Abdul Majeed Lardhi]

prngd not running !!

/etc/rc.config.rc/prngd doest not exist !!

is there any sample configuration file in the system to copy it to /etc/rc.config.d ?

Regards
Abdul Majeed

[Abdul Majeed Lardhi]

Even "prngd" doesnt exist in the system !!

root:/sbin/init.d > /sbin/init.d/prngd.rc
/usr/bin/ksh: /sbin/init.d/prngd.rc: not found

root:/sbin/init.d > ll *prngd*
*prngd* not found


Any hints ?

Regards
Abdul Majeed

[OldSchool]

at one time, hp didn't have the
/dev/*random files, and ssl relied on prngd to create the the "pool" referenced above.

then ssl was updated to look for the /dev/*random stuff, followed by prng, but I don't know at which revision that occurred.

So, I guess my first question is: Is this the first time ssh has been installed (or used) on these boxes, or was it working previously and has now stopped working?

[OldSchool]

you might want to look at a newer version of openssl as well.

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=OPENSSL11I

[Rasheed Tamton]

> swlist -l file|grep -i prngd
openssl.OPENSSL-PRNG: /opt/openssl/prngd
openssl.OPENSSL-PRNG: /opt/openssl/prngd/man/man1/prngd.1
openssl.OPENSSL-PRNG: /opt/openssl/prngd/prngd
openssl.OPENSSL-PRNG: /opt/openssl/prngd/prngd.conf
openssl.OPENSSL-PRNG: /sbin/init.d/prngd.rc


> swlist -l fileset openssl.OPENSSL-PRNG

openssl.OPENSSL-PRNG A.00.09.07l.003 OpenSSL Prng Files

Check whether you have the above fileset installed. If it was correctly installed the startup and the config files related to prng should have there. Otherwise, re-installing openssl might help.

Rgds.

[Robert-Jan Goossens]

Hi,

Have a look at this doc.

http://www11.itrc.hp.com/service/cki/search.do?prevQueryString=&mode=text&searchString=%2Fvar%2Frun%2Fegd-pool&submit1=Search+%C2%BB&searchCrit=allwords&docTypeAll=yesX&docType=Advisories&docType=WhitePapers&docType=EngineerNotes&docType=SecurityBulletins&docType=Manuals&docType=Patch&dateSearchType=lastXdays&dateRange=all&startDateYear=1999&startDateMonth=0&startDateDay=1&endDateYear=2008&endDate...

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=OPENSSL11I

Regards,
Robert-Jan