SSH Software

[Victor Vitug]

Where can I get SSH for my HPUX 11.0 systems?

[Michael Schulte zur Sur]

Hi,

if you do not have the application cds,
you can download it from here:
http://software.hp.com/portal/swdepot/displayProductsList.do?category=ISS

greetings,

Michael

[Patrick Wallek]

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

[The Real MD]

The original is at

http://www.openssh.org

the HP's version is

http://www.software.hp.com/portal/swdepot/searchProducts.do

Regards

Martin.

[Alzhy]

Opt for the HP version from software.hp.com (just search for "Secure Shell").. You will also need the KRNG package...

[Steven E. Protter]

As Nelson says, when available go with depots. HP commonly catches and fixes bugs not fixed in the source. Its also easier to know what is installed on your box if its in the SD/UX database.

SEP

[Alzhy]

Right... for all the critical Open Source software (ie. ssh, tcp-wrappers, sudo, ssl, etc.).. I have all but stopped building these tools myself and now have totally relied on HP built - releases.

[H.Merijn Brand (procura]

To make an easy summary from what's told above:

1. get openssl from http://hpux.connect.org.uk/hppd/hpux/Languages/openssl-0.9.7c/
2. get openssh from http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-3.7.1p2/
3. install them

# swinstall -s /tmp/openssl-0.9.7c-sd-11.00.depot openssl
# swinstall -s /tmp/openssh-3.7.1p2-sd-11.00.depot openssh

you might also need zlib (http://hpux.connect.org.uk/hppd/hpux/Misc/zlib-1.2.1/)

If you want to follow the openssl standards on 11.00 even more, go fetch and install /dev/random from http://freshmeat.net/projects/hpux11-random/

If /usr/local/bin not yet in your $PATH

# perl -pi -e's{:?$}{:/usr/local/bin}' /etc/PATH

# cd /usr/local/etc/openssh
# /usr/local/bin/ssh-keygen -t dsa -N "" -f ssh_host_dsa_key
# /usr/local/bin/ssh-keygen -t rsa -N "" -f ssh_host_rsa_key
# /usr/local/bin/ssh-keygen -t rsa1 -N "" -f ssh_host_key

If you want X11 support over SSH:

# perl -pi -e's/^#?X11Forwarding no/X11Forwarding yes/' sshd_config

If you don't have a ssh user (yet):

# echo 'sshd:*:22:3::/var/empty:/sbin/sh' >>/etc/passwd

Then

# mkdir /var/empty
# chmod 755 /var/empty

# /usr/local/sbin/sshd

testen met

# /usr/local/bin/ssh localhost

Enjoy, Have FUN! H.Merijn

[Alzhy]

And by HP Built Releases .. I mean those available from software.hp.com AND NOT FROM THE hpux-connect web sites.

No offense to the uttelry helpful HP-UX Connect Web site but I will still prefer stuff that is HP "Official"..

[H.Merijn Brand (procura]

Nelson, I get your point, but that software is also sometimes hopelessly outdated (see gzip)

Openssl/openssh is a moving target, and as we write, openssh, as available from the link I posted, is already considered 'old'. Newest openssh is 3.8p1

With the (security) bugs being fixed from the open source world, for a product that deserves its existance because of security, I prefer the builds from the HP porting center's. The people there have enough knowledge to make the best possible fit for the products they have made available for HP-UX (any version)

Enjoy, Have (secured) FUN! H.Merijn

[Brian Lucas_1]

I followed the above detailed steps (very helpful, by the way). I am having trouble logging in with this as a trusted system. When I convert it to an untrusted system, I can ssh just fine to the box. When I followed these steps I was in a trusted mode, so I added the sshd user from within SAM.

Has anyone else had this problem? I'm guessing that it's hashing the password wrong.