how to enable SSH

[Gary Yu]

Hi all,

We plan to use SSH(port 22) instead of telnet in our new servers, but I haven't done that before, can anyone help me, and give me some outline on how to do it?

thanks a lot

[Stefan Farrelly]

This is not an easy task! you can download HP SD format versions of SSH from www.sofwtare.hp.com but getting it all working is a real pain.

I found one easy solution; Buy a copy of the O'Reillys book on SSH. Its well laid out, easy to follow, and makes installing much much simpler. No resources ive found on the web are as easy as this book. You can get this book from any online bookseller.

Good luck.

[Deshpande Prashant]

HI
Take a look at following link.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x627e42308663d611abdb0090277a778c,00.html

Thanks.
Prashant Deshpande.

[Helen French]

Hi Gary:

There are lot of threads in this forum with the same question and excellent answers. Give a search and find out the one which is suitable for you.

This is one of them and see Michael's answer:

http://forums.itrc.hp.com/cm/QuestionAnswer/0,,0x074daf48a9e5d5118ff40090279cd0f9,00.html

HTH,
Shiju

[Stefan Farrelly]

Interesting links provided there. But the summaries they point to are so short I fail to see how they can be comprehensive - especially when compared to a 540 page book on the subject from O'Reillys !

[Victor_5]

You can download it from www.ssh.com/download first, the latest version is 3.1.0.

The README file coming with the software maybe can help you to get the whole picture very quickly.

[Santosh Nair_1]

Just to add my two cents, I found this link very very helpful. Its written by Kevin Steves who also wrote on how to configure HPUX as a Bastion Host. In any case, here's the link:

http://www.atomicgears.com/papers/osshhpux.html

-Santosh

[Gary Yu]

thanks guys,

I followed the links, installed the packages, created keys for root user, and had sshd running on my server now -- thanks again!

My another question is, do I need to use /opt/openssh2/bin/ssh-keygen to generate keys for all the users? I haven't done that yet, but right now I still can connect to the server using ssh(port 22) from my laptop -- I'm using a windows SSH client called putty, and on the unix server, I got such process
root 27358 27182 4 18:08:57 ? 0:00 sshd: myaccount@1

it seemed that I don't need to create keys for "myaccournt" explictly, am I right?

thanks,
Gary

[Darrell Allen · Accepted solution]

Hi Gary,

You are correct. You do not have to generate an ssh key for a user unless that user needs to ssh, scp, or sftp without a password. In that case, the key is generated on the client and installed on the server.

To find out more on ssh without a password, you can (once again) use the ITRC search. "+ssh +password" should give you plenty to look at.

Darrell