SSH, HP UX 11.23, sessions don't close when logged out

[John O'Neill_6]

Hi all,

I've got an issue here with this SSH stuff...
Running HP UX 11.23 on RX2660 server.

Machine is in trusted mode after Bastille has been run on it.

Machine is not in production at this time (and can't be until this is fixed or business reverts to TELNET, which we are advised not to do).

Issue identified with SSH, sshd_config has been set by Bastille to allow up to 3 concurent sessions to be connected to the box.

However... when you log out of an SSH session, the LAST command shows the SSH session(s) as 'still logged on'. Naturally this causes problems, with my test users being unabl to log onto the system.

I'm at wits end with this stuff.. what do I do!?

:(

swlist -l product | grep -i secure reveals...

Secure_Shell A.04.30.007 HP-UX Secure Shell
openssl A.00.09.07l.003 Secure Network Communications Protocol

So, these are the bits which do the SSH stuff, do I need to upgrade?

I might run a patch analysis and see what happens.

However any tips would be most appreciated...

-John

[Arunvijai_4 · Accepted solution]

Hi John,

Why don't you try upgrading Secure shell to latest version available from HP (A.05.00.026)? Here is the link

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

It could be a known issue which might have fixed in the latest release.

-Arun

[John O'Neill_6]

Hi,

Thanks for that, I'll check it out, I logged a call with HP support too and have produced about 5 billion different log extracts and so forth for them to trawl over.

I'll go grab this update though and see how this goes.

I'd just like to add, i'm not a HP UX Guru, I know the basics, but since our HP Reseller lost their HP UX guru i'm sort of flying on my own these days and post a lot of what may seem to be dumb questions here and log lots of issues with HP.

Please bear with me... :(

-John

[Arunvijai_4]

Thats cool John. I am also not a HP-UX guru :). Just trying to learn few things.

[John O'Neill_6]

Hi,

Installed the update to SSH this morning and... LOOKS GOOD! I can log in and out and the sessions now seem to close properly.

If this (SSH) was busted as part of our installation.. what else was busted?

I'll run a full patch analysis and see what ITRC recommends.

-John

[John O'Neill_6]

Closed thread, so far so good with new SSH.

Also, ran a patch analysis via ITRC website:

> Downloaded June_2008_Quality pack
> Downloaded various patches idenified by ITRC with quality pack
> Downloaded IPFilter update (required by June_2008_Quality pack according to analysis by swinstall)
> Downloaded updated Ignite product

Installed all things and happy now, so updating SSH resulted in updating whole box.

Now do update my DR box...

thanks for everyone's kind help!

-John