SSH authentication

[ui05067]

IF we are running ssh server on aix...and I want to allow an ssh client to come in against the box without explicitly having exchanged keys....kind of anonymously...just asking for a login and password....how can I set up the server side (AIX)

 

[normntwrk]

you shouldn't have to do anything extra but I would DENY remote login for root

Norm

 

[ui05067]

I have a userusing ssh to get to my server. He is hanging and timing out and wants to knwo if we can tell if he is actually hitting our server. Is there loggin on the server side that we can turn on to see if he is at least getting to our AIX bos ?

 

[HelloNair]

You need to have the sshd and syslog configured to log the messages. This can be achieved by modifying the /etc/ssh/ssd_config file.

According to sshd manual pages

SyslogFacility -
Gives the facility code that is used when logging messages from sshd(8). The possible values are: DAEMON, USER, AUTH, LOCAL0,LOCAL1, LOCAL2, LOCAL3, LOCAL4, LOCAL5, LOCAL6, LOCAL7. The de-fault is AUTH.

What you need to do is modify the syslogfacility parameter in sshd_config file

For egs.
SyslogFacility LOCAL6

Now add the following lines in /etc/syslog.conf

LOCAL6 /var/log/ssh_logs

Restart syslog and sshd

 

[khalidaaa]

Have a look into these links:

http://www.tek-tips.com/viewthread.cfm?qid=1297050&page=3

http://www.tek-tips.com/viewthread.cfm?qid=1385815&page=3

I hope they will give you all you need!

Regards,
Khalid