ssh issue in 11.23 -- PRNG is not seeded

[Sreer]

Hi Gurus,

Iam having an ssh issue in my box  11.23

Tried to restart notworking

Getting the below errors

serverx root # which sshd
/usr/sbin/sshd
serverx root # /usr/sbin/sshd
PRNG is not seeded ===========> error
serverx root #

rc.log  info:

---------------------

serverx root # more /etc/rc.log | grep -i sec
Configuring Install Time Security
Output from "/sbin/rc2.d/S135sec_mgmt start":
"/sbin/rc2.d/S135sec_mgmt start" SKIPPED
         Please be patient. This may take about 20 seconds.
Starting HP-UX Secure Shell
Output from "/sbin/rc2.d/S393secsh start":
"/sbin/rc2.d/S393secsh start" FAILED
Output from "/sbin/rc2.d/S440comsec start":
"/sbin/rc2.d/S440comsec start" SKIPPED
Run Security Patch Check Utility
serverx root # /sbin/rc2.d/S393secsh start
PRNG is not seeded
EXIT CODE: 255

serverx root # ls -l /dev/urandom
crw-r--r--   1 root       root       114 0x000001 May  6  2009 /dev/urandom

serverx root # ps -ef | grep -i ssh
    root 18726  9759  1 15:06:21 pts/tb    0:00 grep -i ssh
serverx root #

serverx root # uname -a
HP-UX serverx B.11.23 U ia64 2026191446 unlimited-user license
serverx root #

serverx root # swlist -l bundle | grep -i "HP-UX Secure Shell"
  T1471AA               A.03.91.009    HP-UX Secure Shell
serverx root #

 Rgds

Sree

[Sreer]

Hi Again,,,,

Some more details  ..

serverx root # ls -l /dev/random
crw-r--r--   1 root       root       114 0x000000 May  6  2009 /dev/random
serverx root # ls -l /dev/urandom
crw-r--r--   1 root       root       114 0x000001 May  6  2009 /dev/urandom
serverx root #

serverx root # lsdev | grep 113
      113          -1         ipf             unknown
serverx root # model
ia64 hp server rx2600
serverx root #

Rgds

Sree

[Steven Schweda]

   I don't run 11.23, so I know nothing, but...

>   T1471AA               A.03.91.009    HP-UX Secure Shell

Isn't that very old?  Have you tried installing a less obsolete Secure
Shell kit?  Like, say, A.05.80.xxx?

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

[Sreer · Accepted solution]

Hi Gurus,

Finally got the exact solution

steps followed is given below:

#kcmodule rng=best

# kcmodule -v rng

The above commands were to load prngd on actual kernel conf

rng is Strong Random Number generator

OpenSLL, which implements Secure Sockets Layer SSLv2/v3, and HP Secure Shell, which implements ssh, look for random number generators

# ./prngd.rc stop

# ./prngd.rc start

#cd /sbin/init.d/

# ./secsh start

# ps -ef | grep -i ssh

    root  5923     1  0 17:02:55 ?         0:00 /opt/ssh/sbin/sshd

    root  5992  5624  1 17:03:50 pts/ta    0:00 grep -i ssh

Rgds

Sree