Re: Key based SSH transfer



"Dave (from the UK)" <see-my-signature@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> writes:

anjuiype@xxxxxxxxx wrote:
Hi,
The AIX machine is on SSH-2.0-OpenSSH_4.2 and HP_UX machine is
running on openssh-3.7.1p2-pwexp26 ..
Thanks!
Anju



I had that problem. The keys with openssh and ssh2 are not compatible,

That's not true, because OpenSSH supports both, v1 and v2 RSA keys. The format
of both keys is different, but that's no problem, because they are stored in
different files (unless you messed it up). However both, client and server
should agree on which protocol to use and accept (see the config files).

although there is a way to convert from one to other. Sorry, I forgot
how. There is an ssh newsgroup (comp.security.ssh) - you might try there.

I'd suggest to create new keys anyway.


The route I took was to replace the ssh on the AIX box, but whilst it worked
out ok for me, it was probably not a wise move, as I believe some parts
internal to AIX use the ssh.

Unnecessary IMHO. However there were several security updates to SSH recently,
so better have no old version around.


Obviously you can easily add an openssh client on the AIX box, but if you need
the server, it is more difficult to keep the original one running. You could
of course run an openssh server on another port, but that is not too practical
if lots of people are going to connect to it.

You could have configured a different version of SSH listening on a different
port on the server while testing.

Regards,
Ulrich
.



Relevant Pages

  • RE: sshd / ssh setup
    ... USA server and his windows/xp notebook to use SSH. ... followed sshd instruction and built ... and require users to submit keys. ...
    (freebsd-questions)
  • openssh to openssh scp ssh1 compatibility mode error
    ... i am aware of the ssh1 compatibility mode error problem when using scp ... to transfer files from an openssh client to a commercial ssh server. ...
    (comp.security.ssh)
  • Re: two SSH compatibility scenarios: can it work?
    ... We are required to use SSH to log into the Engineering lab machines. ... > server software displays this header upon telnet connection to port 22. ... I still use Windows on my notebook for application compatibility. ... > running OpenSSH 3.4p1. ...
    (comp.security.ssh)
  • Re: SSH
    ... >> OpenSSH client, SSH server will report at least one or more implementation ... When using an SSH client to ...
    (comp.unix.solaris)
  • Debian SSH server configuration
    ... Before you flame me --- I asked this question over in debian-ssh and after 24 hours I didn't have a single hit on it. ... I would like to configure a Debian server to only allow clients to ssh in if the public keys already reside on the hard drives of both machines. ...
    (Debian-User)