openssh banner problem

[Ken Penland_1]

Hi again folks, here is my issue of the day:

I have OpenSSH_3.6.1p2 installed on one of our test HPUX 11.00 machines and testing is going well, however, we use the Banner option in sshd_config so that it displays our "right to monitoring" disclaimer. Well, for batch and cron n stuff, we do not want to see this banner. With our old version of SSH, which was F-Secure SSH, we gave it a "-q" option and that would supress the banner, and in doing a google search and looking at the man page it looks like that is supposed to be the case with OpenSSH. Well, this isnt working....any thoughts as to what we might be missing?

Thanks in advance,

Ken

[Steven E. Protter]

Suggestion:
Latest version of Secure Shell.

It might not be related, but why not eliminate a factor.

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

SEP

[Andrew Cowan]

Hi Ken,

The "-q" option will suppress diagnostic messages, but if you want to kill the motd, then "touch .hushlogin" in the target user's home directory.

[Andrew Cowan]

Hi Ken,

I've done a bit more testing and the -q option does suppress my "Banner" file. The version I'm using is 3.6.1p2, I know that's not the absolutely latest version but at least I have proven that it works, and can at least get a totally silent session.

Good luck,
Andrew

[Ken Penland_1]

I do have the latest version installed, and I am still getting the banner, that is why I was asking if perhaps there was something I missed in the config file or something...swlist shows:

T1471AA A.03.61.002 HP-UX Secure Shell

ssh -V shows:
OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f

but the ssh -q doesnt work. it still shows the banner specified with Banner

[Ken Penland_1]

hang on, even though the T1471AA is the same, it IS a newer version, 3.7.1 downloading now, I will advise if this fixes it :)

[Ken Penland_1]

the 3.7.1 version fixes it...sorry bout the low points, but the T1471AA being the same for both versions threw me off.

[Andrew Cowan · Accepted solution]

Does that mean SEP and I can have more points then? :)

[Ken Penland_1]

works for me :)

course now I have another SSH issue, I will make a new thread for that though :P