ssh and Password Authorization Number ??

[ballans]

Hi all,
First, happy new year...
I've got a technical question about ssh and pan on HP-UX 10.20 server.
When I create a new account with SAM, the system automatically creates a unique Password Authorization Number that will be change by the new user during the first connection on this server.
Before, when the user connected for the first time to the server by telnet with his login, the system automatically ask him for the PAN, so then he could create his proper password...
But now, I want to close telnet service (in inetd) and replace it by ssh.
I've installed OpenSSH 3.9p1 with sources.
ssh server and client works well but when I connect to the server with a new account, he don't ask me for the PAN but for a password (wich doesn't exist!!).
Is there any solution ?
May I have to modify a parameter on a file system ?
Thanks in advance for your reply
Herve

[Stephen Keane]

Have you read this thread also

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=779355

[Stuart Abramson]

Do you have "Trusted System"? I think that the PAN is required by "Trusted System".

My guess would be that you have a "Trusted System" to "ssh" mismatch, if that's possible.

[Steven E. Protter]

I wasn't sure 10.20 could do trusted system. If it can (and it appears so), you may need to install pam authentication management onto 10.20.

I don't know if its available for 10.20 at software.hp.com.

I am relatively certain you can probably find the source, compile it and get it working on 10.20.

If you could see clear to upgrade the box to at least 11.00 I have confirmed that the setup you are trying will work on that platform.

I'm betting someone like Bill Hassell or others with actual access to 10.20 system can clarify or correct my supposition.

SEP

[Steven E. Protter]

If the issue is pam, its not supported on 10.20

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=73153

You still might be able to compile it and get it working well enough to enable ssh.

SEP