Simple HP SSH configuration question ?

[Daniel Simard]

Hi,
I am slowly researching the possibility that we switch ssh products from F'Secure's ssh to HP-SSH. The big simple question is, looking at the forums, I have noticed that configuring HP-SSH seems a little tricky (create keys etc...) But how come I simply installed the package through SWINSTALL and I was instantly able to connect to the server using putty ?


So why all the configuration issues ?

[Stefan Farrelly]

We installed HP-SSH and as you've notice, its self-configuring. We didnt have to do a thing (except perhaps switch on X11 forwarding later).

I dont know why others complain of tricky installation problems - with the standard depot source its very easy. Perhaps they were using a non-depot version (ie. they needed to compile it manually then they would have to crate keys manaully afterwards).

[Colin Topliss]

Depends on what you're trying to achieve.

You can set up SSH in many different ways depending on your particular needs. Some people generate keys so that they automatically trust an incoming session that matches that key (hence no need for password authentication - the authentication is held in the key).

You can choose to tunnel X over SSH to make that protocol a little more secure.

Just take a look at sshd_config to see what options you have - there are many.

If what you've done works for you, then great! :-)

Col.

[Steven E. Protter]

swinstall

follow this document, written by Chris Vail to set up an exchange a public keys among other useful purposes. Then scp will be without a password challenge.

Pretty cool.

Pretty simple.

SEP

[John Payne_2 · Accepted solution]

HP has only relatively recently started packaging OpenSSH in a depot that they support. Most configuration issues are non-depot SW. The depot HP provides is very nice to have and works out of the box as you have seen. Don't worry about all the chatter unless you need somthing other than what you have gotten.

Please realize that HP only support the compile that is already provided in the depot. If you recompile and change things, you are 'unsupported'

Hope it helps

John