secure shell - ssh ??

[Joseph Hoh]

Who uses a secure shell (ssh)?
Do all of your users use it or just admins?
Do you use this type of shell for scripting?
Does HP provide a secure shell?

I've been requested to look into using it but I am not too keen on using freeware on a production system.

[Kevin Wright]

it is my understanding that HP does not support ssh. I have used it in the past to connect to solaris and linux boxes through secureCRT. it works very well, I wish HP had it.

[Steffi Jones_1]

Hi Jeff,

yes, ssh is not an HP product...

check the following thread with info on where to find ssh:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0x329c0559ff7cd4118fef0090279cd0f9,00.html

you can search the forums too ... I have seen a few threads about ssh in the past out here

Steffi Jones

[Jeffrey S. Sims]

Jeff, Secure shell just allows you either a secure connection or to run remote commands securely. You can let your SysAdmins use it to work remotely since it is much safer than telnet (that you definately don't want to use).

You can also run commands with SSH such as sftp, scp, etc, this allows you an increase in security for remote access that you didn't have before. You can generate your own custom keys for encryption.

If you don't want to use the OpenSSH at www.openssh.org you can always pay for it and I think they provide support also, at www.ssh.com.

[Mark Mitchell]

There is in HP rsh restricted shell, that holds people to access files in their home directory only and cuts off a lot of system commands.

[Kurt Henning]

If you do decide to try secure shell, you can obtain openssh and the other required pieces (i.e. zlib, perl, etc.) at

http://hpux.cs.utah.edu/

in depot format for HP-UX 11. This will save you from having to slog through the compile process. Just do the whole thing through swinstall. I'd visit the www.openssh.com as well to get some background information. I installed openssh a couple of weeks ago. No problems so far...

[Andris Mednis]

SSH is strongly recommended for administrators and desirable for users. You get encrypted "equivalents" of telnet, ftp and more. Using OpenSSH, you can have automated cron scripts connecting to other UNIX box without keeping a password (or unencrypted private key) on disk (tested on Linux, OpenBSD). Recently I went through the building of OpenSSH-2.5.2 from source code on an HP9000 A180 server (HP-UX 10.20). You can mail me at andris@hbl.lv, if I can help.

[Robert Gamble]

i admit it: i don't know this answer.

why is using telnet bad ?

[Andris Mednis]

You can look at SSH Case studies at http://www.unixreview.com/books/book_preview9.shtml for examples of clever using SSH.

Why is using telnet bad ? Telnet sends all data unencrypted. Anyone sniffing the network will see all the data, logins, passwords. The same with ftp.