Saturday, September 8, 2012

Open Secure Shell(SSH) and Open Secure Socket Layer(SSL) on AIX 7.1

I installed Open Secure Shell(SSH) and Open Secure Socket Layer(SSL) on my AIX 7.1 host, but when I did a sshd -V I got the below error message.

isvp14_ora> /usr/sbin/sshd -V
OpenSSL version mismatch. Built against 908070, you have 90812f

Here we see the list of SSH and SSL software that is currently installed on the AIX host.

isvp14_ora> lslpp -l | grep ssh
  openssh.base.server     4.7.0.5301  COMMITTED  Open Secure Shell Server
isvp14_ora> lslpp -l | grep openssh
  openssh.base.server     4.7.0.5301  COMMITTED  Open Secure Shell Server
isvp14_ora> lslpp -l | grep ssl
  openssl.base            0.9.8.1802  COMMITTED  Open Secure Socket Layer
  openssl.license         0.9.8.1802  COMMITTED  Open Secure Socket License
  openssl.man.en_US       0.9.8.1802  COMMITTED  Open Secure Socket Layer
  openssl.base            0.9.8.1802  COMMITTED  Open Secure Socket Layer
isvp14_ora>

I deleted the SSH solftware and started afresh with the compatible versions, by installing
from OpenSSH_5.8.0.6102.tar I got the from
http://www-03.ibm.com/systems/power/software/aix/expansionpack/index.html

On untarring OpenSSH_5.8.0.6102.tar I saw the following files in the directory.

isvp14_ora> ls
.toc                    openssh.msg.Ja_JP       openssh.msg.es_ES
OpenSSH_5.8.0.6102.tar  openssh.msg.KO_KR       openssh.msg.fr_FR
openssh.base            openssh.msg.PL_PL       openssh.msg.hu_HU
openssh.license         openssh.msg.PT_BR       openssh.msg.it_IT
openssh.man.en_US       openssh.msg.RU_RU       openssh.msg.ja_JP
openssh.msg.CA_ES       openssh.msg.SK_SK       openssh.msg.ko_KR
openssh.msg.CS_CZ       openssh.msg.ZH_CN       openssh.msg.pl_PL
openssh.msg.DE_DE       openssh.msg.ZH_TW       openssh.msg.pt_BR
openssh.msg.EN_US       openssh.msg.Zh_CN       openssh.msg.ru_RU
openssh.msg.ES_ES       openssh.msg.Zh_TW       openssh.msg.sk_SK
openssh.msg.FR_FR       openssh.msg.ca_ES       openssh.msg.zh_CN
openssh.msg.HU_HU       openssh.msg.cs_CZ       openssh.msg.zh_TW
openssh.msg.IT_IT       openssh.msg.de_DE       openssl-0.9.8.1802
openssh.msg.JA_JP       openssh.msg.en_US       openssl-0.9.8.1802.tar

I then installed the openssh.base using smitty, here is the new version of ssh on the AIX machine.
NOTE: Remember to accept the license agreement while installing using smitty.

isvp14_ora> lslpp -l | grep ssh
  openssh.base.client     5.8.0.6102  COMMITTED  Open Secure Shell Commands
  openssh.base.server     5.8.0.6102  COMMITTED  Open Secure Shell Server
  openssh.license         5.8.0.6102  COMMITTED  Open Secure Shell License
  openssh.man.en_US       5.8.0.6102  COMMITTED  Open Secure Shell
  openssh.msg.en_US       5.8.0.6102  COMMITTED  Open Secure Shell Messages -
  openssh.base.client     5.8.0.6102  COMMITTED  Open Secure Shell Commands
  openssh.base.server     5.8.0.6102  COMMITTED  Open Secure Shell Server
isvp14_ora>

isvp14_ora> /usr/sbin/sshd -V
sshd: illegal option -- V
OpenSSH_5.8p1, OpenSSL 0.9.8r 8 Feb 2011
usage: sshd [-46Ddeiqt] [-b bits] [-f config_file] [-g login_grace_time]
                           [-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len]
isvp14_ora>  


To configure passwordless ssh on Oracle RAC nodes here is link to the Oracle docs that talk about it.
http://docs.oracle.com/cd/E11882_01/install.112/e24614/manpreins.htm

No comments: