Open port 22

[Joel Pyron]

Hey all,

Bit of a HP-UX noob, but having a problem here.

Basically did a straight install of 11i 1.6, didn't change any settings yet. It has it's network info and can ping the gateway so looks good there.

My problem comes in when I try to SSH to the server from outside the network, it just hangs for a long time before timing out.

Is port 22 open by default with HP-UX?

Know this next question is a big RTFM but I'm not finding (or having the worst luck with it) and good sites or documentation with HP-UX commands.

How do I check to see what ports are open and if they are not what command should I use to modify port settings?

Thanks!

Joel

[A. Clay Stephenson · Accepted solution]

Well, it all depends upon whether Secure Shell is installed and even then what port sshd has been configured to listen on.

A really good test is simply:
ps -ef | grep sshd

In you don't see the ssh daemon then do a
swlist | grep -i "Secure"
to see if the Secure Shell product is installed. If it's not installed then you can download and install it for free.

Post the output of these commands and we can go from there.

[Steven E. Protter]

Shalom Joel,

If sshd is running, the most likely cause of the issue is a firewall blocking access.

ssh -vvv serverhostname

that will let you know where you stand.

SEP

[Ivan Ferreira]

How do I check to see what ports are open and if they are not what command should I use to modify port settings?

- You can use the nmap command to identify which ports are open.

- To open a port it really depends of the services, some of them are controlled by inetd.conf, others have specific configuration files and startup scripts.

[Mel Burslan]

to check if sshd is running

ps -ef | grep sshd

if you see a process named as sshd, it means is working.

But, I am not 100% sure if ssh is coming bundled with the OS at your revision level. You can always download it from hp in a depot format and install it using swinstall.

Answer to your second question. how to see which ports are open, can be done:

netstat -a | grep port_number

you will get some extra lines but it will minimize the output to a manageable level.

or you can get the utility lsof from

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/lsof-4.77/

and install it using swinstall again, to see which port is being held open by which process.

Hope this helps

[Joel Pyron]

Thanks for responses guys.

Here's what I get when I run the 'ps -ef | grep sshd' command:

# ps -ef | grep sshd
root 8999 8687 | 12:45:39 pts/0 0:00 grep sshd. Clay

# swlist | grep -i "Secure"
#

As you can see when I did the swlist it didn't really seem to do anything.

[Mel Burslan]

you need to download and install the secureshell from hp under the circumstances.

[Jeff Schussele]

Hi Joel,

I'm wondering why you loaded 11i v1.6 (11.22) as it ceased sales on 04/30/04 & HP discontinued support for it on 10/31/05.
You really should be loading 11i v2 (11.23) as HP won't stop selling it until 12/31/08 & will support it through the end of 12/31/13.

See the following for release history:

http://www.hp.com/softwarereleases/releases-media2/history/slide2.html

Rgds,
Jeff

[Mel Burslan]

SecureShell for hpux can be obtained, free of charge, from hp, by going through and following the instructions on this page:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

hope it helps.

[Josiah Henline]

swlist -l product|grep -i ssh #to see what version of ssh is install or if you even have it installed.

grep sshd /etc/inetd.conf #to see if you have ssh configured to run out of inetd

grep ssh /etc/services #to see if there is a port, default for ssh is 22, reserved for sshd to listen on.

[Joel Pyron]

Thanks for the reposes all, will get secureshell.


Jeff:

Actually just grabbed a OS container from our cabinet to do the install. From what I could see 1.6 was the latest 'n greatest.

Will see if we have a copy of v2 but I'm not sure.

[Torsten.]

You should find a *current* 11i v2 media anywhere in your container!

Don't go with 11i v1.6, because this is history! First release was 2002, end of support was 2005. No more support, no patches.
You need to install 11i v2.

[Joel Pyron]

LOL, I was doing just that!

Sad thing is looks like 1.6 is the latest and greatest we have of HP-UX, even ran by my manager to confirm and pleaded with him about making me use something so outdated =D