Hi,

tyates@newsguy.com wrote:

> Can someone offer some help with getting a connection between Linux and
> AIX.
> Here are the details:
>
> Linux runs OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
> AIX runs F-Secure SSH 5.0.1 on powerpc-ibm-aix5.2.0.0
>
> I have successfully been able to SSH from AIX to Linux, no
> password/passphrase for automated scripts, but cannot figure out the
> proper
> steps for the other direction. Certainly didn't think it was that
> difficult
> but I'm missing something simple. Has anyone done this before? The Linux
> server is used being used as a monitoring server on a secured data-center
> network.

Give us some debugging output first.
On the Linux host run something like:
ssh -v -v root@myaixhost
and publish the ouput (you may sanitize the real host names).

>
> Any help greatly appreciated.

--
Claudiu

On 2006-02-09, Claudiu Costin wrote:

>> Linux runs OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090701f
>> AIX runs F-Secure SSH 5.0.1 on powerpc-ibm-aix5.2.0.0
>>
>> I have successfully been able to SSH from AIX to Linux, no
>> password/passphrase for automated scripts, but cannot figure out the
>> proper
>> steps for the other direction. Certainly didn't think it was that
>> difficult
>> but I'm missing something simple. Has anyone done this before? The Linux
>> server is used being used as a monitoring server on a secured data-center
>> network.

Key formats and file names are different between the two versions.

Create an F-Secure key pair using "ssh-keygen2 -P" and it should appear on
the AIX box in the file ~/.ssh2/$key_name where that name uses a number of
bits and a format and a serial character a,b,c,...

The -P is to produce a key with no passphrase - temporarily to enable
importing in OpenSSH.

Then mention that public key in ~/.ssh2/authorization (I think it's a 'z')
(and it's not authorized_keys as in OpenSSH) with the text
Key: $pubkey_name

Copy the private key (ssh with password presumably works) to your linux box
and import "ssh-keygen -i" that key and be ready to use that key in commands
like "ssh -2 -i key_4_aix.dsa ...." unless you give it the default key name
or include it in a key agent.

Use the appropriate ssh-keygen command to add retrospectively a passphrase to
the private keys at both ends.

I've specified it this (slightly odd) way becasue OpenSSH "ssh-keygen -i" does
importing but I don't know the related export mechanism. It's merely numbers so
someone with the right knowledge and a bignum calculator should be able to do
it.

--
Elvis Notargiacomo master AT barefaced DOT cheek
http://www.notatla.org.uk/goen/
Powergen write "Why not stay with us" - let me count the ways!