Implementing secure shell

[KRS_1]

Hi all,

I would like to implement secure shell.

let me know all steps related to secure shell.

Thanks and regards
Raj

[Robert Bennett_3 · Accepted solution]

Install secure shell on 2 servers ( ex. HOME and REMOTE)

a. Edit the /opt/ssh/etc/ssh_config file, change the following keyword to the example.

Protocol 2,1

b. Edit the /opt/ssh/etc/sshd_config file, change the following keywords or uncomment the keywords as listed below.

Protocol 2,1
HostKey /opt/ssh/etc/ssh_host_key
HostKey /opt/ssh/etc/ssh_host_rsa_key
HostKey /opt/ssh/etc/ssh_host_dsa_key
PermitRootLogin yes
PubkeyAuthentication yes
AuthorizedKeysFile .ssh/authorized_keys
RhostsAuthentication no
IgnoreRhosts yes
PermitEmptyPasswords no
X11Forwarding no

c. Establish the root trust from HOME to the root account REMOTE.

on REMOTE
cd /roots/.ssh
scp HOME:/roots/.ssh/id_rsa.pub ./id_rsa.pub.HOME
cat id_rsa.pub.HOME >> authorized_keys

d. Test the trusted login ability of root on HOME

root@HOME# ssh REMOTE

if the login was successful without a password the configuration is complete.

This should get you going to set up ssh for root between 2 servers. just repeat the procedure for any other REMOTE server.

[Volker Borowski]

... and if you need ssh-client on windows, use putty !
Volker

[Rouchon_2]

if you only need secure shell and not trusted systems and rlogin without password. there is only 2 steps.

- Install latest ssh package
- disable unsecure shell (telnet)

Enjoy.

I also recommend to install with ssh tcpwrapper to be able to refuse connection based on IP of requestor.

Permit Root login is not recommended just secure shell with a normal user and su in your shell. Because root is a well known account name. this will disallow bruteforce Cracking.

[Sanjay_6]

Hi Raj,

Try this link,

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Check out the release notes link.

Hope this helps.

Regds

[Nguyen Anh Tien]

docs is available at
http://docs.hp.com/en/T1471-90008/index.html
installation at:
http://docs.hp.com/en/T1471-90008/ch01s07.html

[Sยภเl Kย๓คг]

You need to install the Secure Shell application, either from the application CD or download the bundle from site. This won't be installed by default on an HP UX installation.
Under /etc/opt/ssh you can find the configuration files and do the appropriate modifications to tune for your requirements.

After modifications u need to kill /opt/ssh/sbin/sshd process and restart it to reflect the changes..

Regards,
SK

[KRS_1]

Thank you guys