Implementing OpenSSH on HPUX !

[Ivan Azuara]

Hi !

I??m triying to connect to HPUX server using an openssh connection, but never can connect me to the server. I made the same test on a Linux server and the problem doesn??t appear. I??m using the Reflection emulator software, and check the option for the configuration connection, and use the 22 port for "openssh" connections. In the /etc/services file doesn??t appear this port (HPUX server).

Somebody know if i need to install some patches or software for openssh connections on the HPUX server ?.

P.D> My servers have HPUX 10.20 and 11.00 OS.


Best Regards !

[Jeff Schussele · Accepted solution]

Hi Ivan,

Yes you'll need to download & install OpenSSH - for 11.0/11.11.11.20 you can get it here:

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/openssh-3.5p1/

Has following dependencies:

OpenSSL:

http://hpux.cs.utah.edu/hppd/hpux/Languages/openssl-0.9.6g/

TCP_Wrappers:

http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/tcp_wrappers-7.6/

And zlib:

http://hpux.cs.utah.edu/hppd/hpux/Misc/zlib-1.1.4/

HTH,
Jeff

[harry d brown jr]

ssh, in a "depot" from hp:

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA


live free or die
harry

[Bill Hassell]

Just to second Harry's recommendation, download HP's ready-to-use version of OpenSSH. There are a lot of details needed to make ssh work correctly if you compile your own version. Once loaded, Reflection has no difficulty in connecting at all. You'll probably need to look at the ssh config files along with the O'Reilley Secure Shell book to configure Xwindows and the desired behavior for key generation.

Note that OpenSSH from HP is only for 11.0 and higher. There has been no active development for 10.20 since Dec 2001.

[Jeff Schussele]

It should be noted that the OpenSSH pkg I referenced IS a pre-compiled binary depot & importantly it's ver 3.5p1 - the latest available & is not, as of yet, known to be susceptible to any of the reported exploits against the 3.1p1 version.

Granted it IS much more convenient to have the bundled full depot from HP.....

My 2 cents,
Jeff

[Mike Williams_3]

Hi,

I have a combined depot of openssh, openssl and prngd - all latest versions. Let me know if you would like a copy. (Offline as it is 2.9Mb)

Regards

[Chris Vail]

You do not have to use Reflection to get your session on the HP box. We use Citrix Metaframe for Unix 1.1 instead. Its too pricey if you have only one user, Reflection is pricey too--especially if you have lots of users. You can get the Metaframe Unix Client for 3 users for less than $3k USD, and it will then share licenses with other Citrix servers on your network. This makes it REALLY cheap to install. You can get a 60 day evaluation copy for free from Citrix.com.
Reflection is a hassle to install, and even harder to maintain. Citrix is easy to install and maintenence is nothing. It uses Secure Sockets Layer for its connection, so its as secure as ssh.
We use BOTH Metaframe for Unix and SSH. SSH is used primarily between unix hosts, and Citrix is used between desktops and the unix systems.

Good Luck
Chris

[Ivan Azuara]

Hi !

I installed the depot for HPUX 11i:

Secure_Shell A.03.10.002 HP-UX Secure Shell

I??m using the Reflection Software for connect me to the HPUX Servers, and don??t have any problem when i make connections using the Reflection for Hp and Digital (with openssh), but when i try to use the Reflection X, never appear the graphical interface. I was checking the SSH-Readme.pdf file, but only mentioned something about the configuration in the /opt/ssh/etc/sshd_config file.

I made some modifications in this file:

X11Forwarding no
X11DisplayOffset 10
X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#KeepAlive yes
#UseLogin no

Somebody know how i must modify this file ?.


Best Regards !

[Oleg Zieaev_1]

Ivan,
Search the forums. I do remember seeing this problem resolved. I think you need ip_forwarding to be enable to accomplish your task.

Hope this helps,
0leg

[Oleg Zieaev_1]

I meant X11Forwarding.

:) sorry for confusion. Too many things in my head :)

Hope this helps,
0leg