Help -- OpenSSH (Linux) to FSecure (AIX) - SSH

This is a discussion on Help -- OpenSSH (Linux) to FSecure (AIX) - SSH ; Can someone offer some help with getting a connection between Linux and AIX. Here are the details: Linux runs OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f AIX runs F-Secure SSH 5.0.1 on powerpc-ibm-aix5.2.0.0 I have successfully been able to SSH from ...

+ Reply to Thread
Results 1 to 3 of 3

Thread: Help -- OpenSSH (Linux) to FSecure (AIX)

  1. Help -- OpenSSH (Linux) to FSecure (AIX)

    Can someone offer some help with getting a connection between Linux and AIX.
    Here are the details:

    Linux runs OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
    AIX runs F-Secure SSH 5.0.1 on powerpc-ibm-aix5.2.0.0

    I have successfully been able to SSH from AIX to Linux, no
    password/passphrase for automated scripts, but cannot figure out the proper
    steps for the other direction. Certainly didn't think it was that difficult
    but I'm missing something simple. Has anyone done this before? The Linux
    server is used being used as a monitoring server on a secured data-center
    network.

    Any help greatly appreciated.

  2. Re: Help -- OpenSSH (Linux) to FSecure (AIX)

    Hi,

    tyates@newsguy.com wrote:

    > Can someone offer some help with getting a connection between Linux and
    > AIX.
    > Here are the details:
    >
    > Linux runs OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
    > AIX runs F-Secure SSH 5.0.1 on powerpc-ibm-aix5.2.0.0
    >
    > I have successfully been able to SSH from AIX to Linux, no
    > password/passphrase for automated scripts, but cannot figure out the
    > proper
    > steps for the other direction. Certainly didn't think it was that
    > difficult
    > but I'm missing something simple. Has anyone done this before? The Linux
    > server is used being used as a monitoring server on a secured data-center
    > network.


    Give us some debugging output first.
    On the Linux host run something like:
    ssh -v -v root@myaixhost
    and publish the ouput (you may sanitize the real host names).

    >
    > Any help greatly appreciated.


    --
    Claudiu

  3. Re: Help -- OpenSSH (Linux) to FSecure (AIX)

    On 2006-02-09, Claudiu Costin wrote:

    >> Linux runs OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
    >> AIX runs F-Secure SSH 5.0.1 on powerpc-ibm-aix5.2.0.0
    >>
    >> I have successfully been able to SSH from AIX to Linux, no
    >> password/passphrase for automated scripts, but cannot figure out the
    >> proper
    >> steps for the other direction. Certainly didn't think it was that
    >> difficult
    >> but I'm missing something simple. Has anyone done this before? The Linux
    >> server is used being used as a monitoring server on a secured data-center
    >> network.


    Key formats and file names are different between the two versions.

    Create an F-Secure key pair using "ssh-keygen2 -P" and it should appear on
    the AIX box in the file ~/.ssh2/$key_name where that name uses a number of
    bits and a format and a serial character a,b,c,...

    The -P is to produce a key with no passphrase - temporarily to enable
    importing in OpenSSH.

    Then mention that public key in ~/.ssh2/authorization (I think it's a 'z')
    (and it's not authorized_keys as in OpenSSH) with the text
    Key: $pubkey_name

    Copy the private key (ssh with password presumably works) to your linux box
    and import "ssh-keygen -i" that key and be ready to use that key in commands
    like "ssh -2 -i key_4_aix.dsa ...." unless you give it the default key name
    or include it in a key agent.

    Use the appropriate ssh-keygen command to add retrospectively a passphrase to
    the private keys at both ends.

    I've specified it this (slightly odd) way becasue OpenSSH "ssh-keygen -i" does
    importing but I don't know the related export mechanism. It's merely numbers so
    someone with the right knowledge and a bignum calculator should be able to do
    it.

    --
    Elvis Notargiacomo master AT barefaced DOT cheek
    http://www.notatla.org.uk/goen/
    Powergen write "Why not stay with us" - let me count the ways!

+ Reply to Thread