IPO & App server 11.0 cant SSH puttyonto server

[Kierso]

Hi Guys,

A customers IPO and App server had been upgraded from 9.1. to 11.0.
I can log onto both the IPO and App server using the Manager software and by logging onto the servers Web UI with the account,
Administrator and the adminpassword.

When I try to use either Putty SSH or WinSCP to connect from a local machine to the App server using the above credentials I am declined.

I have logged onto the Wbe UI and changed the root and the Administrator password but I still cant use them to SSH onto the server from a local PC.

Would anyone have any suggestions.

Cheers

 

[kyle555]

do you fail before or after being prompted for a user/pass?

download the latest putty

if you can get on the local/VM console as root, try ssh Administrator@localhost. try ssh -vvv Administrator@localhost (that's very very very verbose), might give clues about what it doesn't like.

I can tell you that on the Aura side, when 7.1 came around, the permitted ciphers in their SSH tightened up, so maybe just the newest putty would be all you need. If that's the case, I'd expect you to fail before a user/pass prompt. If it's something else, ssh -vvv from/to localhost compared to what you get on a 9.1 might give some clues.

 

[Kierso]

Hi
Thanks for your reply. I downloaded the latest Putty.
I enter the Administrator and then get the prompted to enter password. I enter the Administrator password and get "Access denied"
It would make you think the Password was incorrect.

I am currently remotely connected to local machine. Its a 2 hour drive away. Its starting to look like I my have to get off my butt or call when close.

Thanks for your help.

 

[janni78]

Have you tried Administrator / Administrator ?

Early SE didn't set the linux password when you changed IPO password.

"Trying is the first step to failure..." - Homer

 

[kyle555]

Is it a VM? Can you get on the VM console as root? If you can get a root console, ssh Administrator@localhost could test SSH locally from the box.

SSH not letting you log in can be for a number of reasons - like a locked out account - which I don't THINK IPO server does.

I've seen other VM deployments in Aura where the VM deployment template lets you pick a trivial password - like pw Administrator for the account named Administrator and it deploys the VM with that but is completely ignorant of the Linux security policies that actually forbid passwords that are the same as/contain the username.

 

[Kierso]

Hi Guys,

Cheers for your positive responses. I have tried every username and password combination I can think of which includes Administrator, Administrator and Administrator password
The App server is a standalone server which was installed by another supplier. My company did upgrade from 9.0 to 11.0 as we installed the customers other systems and connected together with SCN.

I vaguely remember Avaya blocked SSH/SFTP connections due to a vulnerability issue in the app server and this may have carried over with the upgrade from 9.0?
The engineer was able to log onto the terminal whilst onsite.

 

[Westi]

They have changed the password for the server and you have to get it from them.

Joe W.

FHandw, ACSS (SME)


"This is the end of the world, make sure to buy your T-shirt before it is too late"
Original expression of my daughter

 

[DanACS]

Log onto :7071 - port 22 will be disabled in firewall settings.

ACSS - SME
APSS - SME
APDS - Unified Communications
ACS - IP Telephony
ACA - IP Telephony

 

[Pepp77]

Dan - shouldn't be on an upgraded system, but yes is on new builds at R11

| ACSS SME |

 

[tfisher7us]

you need to login to the gui interface of the app server then enable ssh login

 

[gntsfan8690]

I'm running into this same issue with the UC module on my lab. Was fine at 10.1, but in 11.0 I am not able to get in anymore with WinSCP or Putty, even though I'm entering the correct Administrator and root logins. Where do I find the setting to enable SSH login, if that's the cause? Not seeing anywhere while using the Platform view in Web Manager on port 7071.