SSH Version A.04.20.004

[Kevin Westover]

I recently installed SSH Version A.04.20.004 on an HPUX 11i server. The server had a previous version of SSH that was deemed to be insecure according to a recent bulletin from HP. After installing the new version, users cannot use passwords longer than 8 characters. Any ideas on this?

Thanks.

Kevin

[Jeff_Traigle]

Set KerberosAuthentication to no. Solved the problem when I upgraded from 3.61 and old to 4.00 at my previous job.

[Kevin Westover]

Where do I set the Kerberos Authentication? I checked the ssh_config file and didn't find anything about Kerberos. Thanks.

Kevin

[Asif Sharif]

Hi Kevin,
Some documentation on Kerberos on docs.hp.com

Configuration Guide for Kerberos Products on HP-UX
http://docs.hp.com/hpux/onlinedocs/J5849-90003/J5849-90003.html

Configuration Guide for Kerberos Client Products on HP-UX
http://docs.hp.com/hpux/onlinedocs/T1417-90006/T1417-90006.html

Regards,
Asif Sharif

[Steven E. Protter]

Shalom Kevin,

Try the sshd_config file.

I would say that if you've upgraded authentication to use Kerebos, that a step or steps in the configuration process were skipped.

SEP

[Kevin Westover]

Thanks for everyone's ideas on this problem. It turned out that during the install of the new version of SSH the new sshd_config file was written to an alternate location because the current sshd_config file had been modified. To correct the problem, I simply copied the new sshd_config file into /opt/ssh/etc to replace the old one. After restarting sshd, the password problem went away.

I left Kerberos at the default of "yes" and it still works fine. Thanks again for everyone's input on this.

Kevin

[Kevin Westover]

See previous reply for resolution. Thanks.

Kevin