Operating System - HP-UX
1833163 Members
3455 Online
110051 Solutions
New Discussion

ssh trushted and non trusted

 
SOLVED
Go to solution
Belinda Dermody
Super Advisor

ssh trushted and non trusted

Ok -- need an explanation. I am in the process of setting up new HP 11i system at a remote location. I loaded the software and got my ssh connection working properly, I then converted the new remote system to a trusted passwd system and any new ssh connection would not work, it would be prompted for a passwd it look like it would connect me and then it would come back and say connection closed. (thank goodness I had a couple of windows still open to it.), I did a lot of playing around and I finally decided to untrust the system again and after I untrusted the system I was then able to ssh to the remote system without problem. My local host is set up as a trusted system.

Any ideas what I need to do.
7 REPLIES 7
Jeff Schussele
Honored Contributor

Re: ssh trushted and non trusted

Hi James,

Did you compile your own OpenSSH?
If so did you use the USE_PAM option?
It's required for trusted systems.

HTH,
Jeff
PERSEVERANCE -- Remember, whatever does not kill you only makes you stronger!
Victor BERRIDGE
Honored Contributor

Re: ssh trushted and non trusted

Hi
Were you trying to connect yourself as root?

I face sometimes problems like that when changing policies because some software that uses passwd rely on finding the passwd where it was at compilation/install time, have you tried to (re)install ssh after you trusted the box?


All the best
Victor
Belinda Dermody
Super Advisor

Re: ssh trushted and non trusted

No it is the binary file from the HPUX archive site 3.8, it is also bundle up file from the local platform...
Belinda Dermody
Super Advisor

Re: ssh trushted and non trusted

I tried as root and as my own userid...
Darrel Louis
Honored Contributor

Re: ssh trushted and non trusted

James,

It could be that the user is locked try and perform the following:

Check if a user is locked:
/usr/lbin/getprpw -m lockout $USER

unlock a user:
/usr/lbin/modprpw -v $USER
/usr/lbin/modprpw -l -k $USER
/usr/lbin/modprpw -v $USER

Check lifetime etc....
/usr/lbin/getprpw -m lftm,exptm,mintm,acctexp $USER

Settings for a user
/usr/lbin/modprpw -m lftm=0 $USER
/usr/lbin/modprpw -m exptm=0 $USER
/usr/lbin/modprpw -m mintm=0 $USER
/usr/lbin/modprpw -m acctexp=-1 $USER

/usr/lbin/getprpw -m llog $USER
llog=0

GoodLuck

Darrel
Bill Hassell
Honored Contributor
Solution

Re: ssh trushted and non trusted

Does your root password on the untrusted system exceed 8 characters? If so, it is a non-standard password and works on the untrusted system because the extra characters are silently ignored. However, when you convert to Trusted, passwords can be much larger but the untrusted passwd file only has the first 8 characters available. So once converted, you must use only the first 8 characters when you first login. You can then change the password to a longer one and it will be honored as expected.


Bill Hassell, sysadmin
Belinda Dermody
Super Advisor

Re: ssh trushted and non trusted

Bill, was actually correct and I think I asked the same question about 8 years ago, as soon as I read his thread it shook the cobwebs (hey at 62 your get a few senior moments) and I changed the passwds to 8 or less and converted the system and was able to ssh over and then changed the passwd back to our corporate standard and everything is fine. As always this is the greatest site around and the people that support it are TOPS....