Problems deploying or executing commands on clients

[Jose Javier Sianes Ruiz]

I have some problems trying to deploy or execute for some HP-UX client machines. This issue only occurs in HP-UX machines with a new SSH daemon version:

T1471AA A.03.81.002 HP-UX Secure Shell

When I try to make any deploy or command execution by SIM I get error messages like displayed in attached JPEG:

EXCEPTION CLASS: com.hp.mx.dtf.sshClient.MxSshFailedConnectionException
EXCEPTION: Unable to contact the SSH server on node "paradax.mydomain.com".

With a previous version of ssh (A.03.61.002) there is no problem. I have some HP-UX clients in SIM with this previous version and I can perform any commands without problems. Also, with new sshd version I have to modify one line in sshd_config file to get login to the system (I must change 'UsePAM yes' to 'UsePAM no') because with defaults when I correctly autenticate and log into the system, I'm automatically disconected and this message appears in syslog:

Dec 15 13:58:20 paradax sshd[3300]: Accepted keyboard-interactive/pam for root from 10.23.63.2 port 51217 ssh2

When I change to 'UsePAM no' this other message is displayed when connect:

Dec 15 14:00:06 paradax sshd[3382]: Accepted password for root from 10.23.63.2 port 51241 ssh2

Loging in correctly with my favorite SSH client .

Do you think can be any relation with SIM problem? There is no difference in SIM to active/deactive PAM in sshd, I get allways the same error message when try to deploy or execute some command. I have verified that my authorized_keys2 file is correctly installed in .ssh for root user. Here is my current SIM version:

Systems Insight Manager 4.2 - HP-UX C.04.02.00.00 ( 2004-12-10 10:36 )

And here, version for other aplications related:

JAVAOOB 2.03.01 Java2 Out-of-box for HP-UX
T1457AA 1.4.2.06.00 Java2 1.4 RTE for HP-UX
T1457AAaddon 1.4.2.06.00 Java2 1.4 RTE -AA addon for HP-UX
T1458AAventi 1.4.2.05.00 Java2 1.4 Netscape Plugin with JRE for HP-UX
T1471AA A.03.81.002 HP-UX Secure Shell
ixPostgreSQL A.03.00-7.4.2 Object-Relational Database Management System

Uname information:

HP-UX paradax B.11.11 U 9000/810 2013576237 unlimited-user license

Thanks for all your help.

[Jose Javier Sianes Ruiz]

All was because SIM has a know host file with public keys of servers. If someone change his credentials, you have to remove the line asociated to the server in this file in order to force a reload the newone. The file you have to change is /etc/opt/mx/config/sshtools/known_hosts. Once you have deleted the line, use mxagentconfig to add the agent credentials again in the server and restart SIM.