IBM i Global

IBM i 

A space for professionals working with IBM’s integrated OS for Power systems to exchange ideas, ask questions, and share expertise on topics like RPG and COBOL development, application modernization, open source integration, system administration, and business continuity.


#Power


#IBMi
#Power
 View Only

  • 1.  IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 01/05/23 10:33 AM
    Hi,
    I'm trying to connect to SSH through IBM i Access Client Solutions - Open Source Package Management but I see the message: 

    However I can connect to SSH to the same server using either Windows PowerShell or MS Visual Studio Code.

    This is an IBMi with release 7.3 and I'm using OpenVPN to get access.
    Also the IBM i ACS About is the following:


    I know there are a lot of variables in place and I don't expect a final solution for the problem. I'm more trying to see if there is any basic setup I should be looking into.
    I'd appreciate any feedback you can share.

    BR, Paulo

    ------------------------------
    Paulo Silva
    ------------------------------

    #IBMiAccessClientSolutions


  • 2.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 01/18/23 07:46 AM
    Edited by Satid Singkorapoom 01/18/23 07:46 AM
    Dear Paulo

    I did a Google search with "ibm i access client solution ssh" and found this ACS Getting Started Guide with sections 9.13 Secure Shell (SSH) Terminal and 9.13.1 SSH Terminal Prerequisites :  https://www.ibm.com/support/pages/ibm-i-access-acs-getting-started   Have you read these 2 sections and comply to what they have to say? 

    Next, I also found this IBM i Technote in Google result : SSH Tunnel configuration for use with IBM i Access Client Solutions    Does it contain the information that serves your purpose?

    ------------------------------
    Right action is better than knowledge; but in order to do what is right, we must know what is right.
    -- Charlemagne

    Satid Singkorapoom
    ------------------------------



  • 3.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 11/30/23 10:13 AM

    Hi Paolo,

    did you ever manage to solve this? I have the exact same issue on one of my LPARs.

    I think it is down to the host key stored in known_hosts having changed, however I don't know where ACS stores "it's" version of known_hosts.

    Typically it would be in your $HOME/.ssh directory for MacOS/Linux and I guess something similar for Windows. I can get a regular SSH session to the LPAR but not one for ACS Package Management, so it must use some other place to store the known_hosts.

    Not been able to find it yet, so wondered if you had gotten anywhere?

    Cheers

    Andrew



    ------------------------------
    Andrew Smith
    ------------------------------



  • 4.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 12/01/23 03:52 AM

    Hi Andrew,

    I solved a similar problem in the past by generating a dump when proposed, then searching "getAcsKnownHosts" in it.



    ------------------------------
    Sylvain Manceau
    ------------------------------

    Original Message


  • 5.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 12/01/23 04:09 AM

    Hi Sylvain,

     

    Thanks for that – I will give that a go.

    I did try looking in the dumps but was looking for things like ssh/key/known and that kind of thing.

     

    Yours looks far more specific 😊

     

    Cheers

     

    Andrew

     




    Original Message


  • 6.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 12/01/23 05:03 PM

    Are you able to log in to IBM i via SSH from Putty or other SSH terminal ?



    ------------------------------
    Richard Schoen
    Owner/President
    MobiGoGo LLC
    Minneapolis MN
    612-315-1745
    ------------------------------

    Original Message


  • 7.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 12/04/23 11:01 AM

    Hi Richard,

     

    Yes, that is the weird thing. I can log in using regular SSH to the LPAR. No problem with using private key or password authentication to log on.

    I can see from the dump that it does a lookup on its own file, instead of known_hosts.

    There was a file named something like acs_known_hosts in my .ssh directory which I removed, but that hasn't made any difference

     

    I think the next step has to be to completely remove it, and also the configuration directories to see if it makes any difference

     

    Cheers

     

    Andrew

     




    Original Message


  • 8.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 12/08/23 09:46 AM

    Hi All,

    just to publish the solution here, as it is finally solved.

    I had the key for the host in known_hosts already. So the Open Source Package Management was complaining about it but not allowing me any option to fix it.

    The regular SSH/putty sessions weren't complaining about the different key for the host, so it was still connecting.

    To solve it:

    ssh-keygen -R ip_address

    That removed it from known_hosts and Open Source Package Management connected successfully again.

    Hope this helps someone else with the same problem at a later date.

    Cheers

    Andrew



    ------------------------------
    Andrew Smith
    ------------------------------

    Original Message


  • 9.  RE: IBM i Access Client Solutions - Open Source Package Management - Connect to SSH failing

    Posted 12/08/23 09:53 AM
    Edited by Richard Schoen 12/08/23 09:54 AM

    Ah yes. I have run into that before now that I remember it.

    I had an issue where I was using a hard coded host name but changing the systems I connect to. 

    And when the signature changed I started seeing that error.

    Glad it's solved for you.

    Thanks for posting your resolution for others to see.



    ------------------------------
    Richard Schoen
    Owner/President
    MobiGoGo LLC
    Minneapolis MN
    612-315-1745
    ------------------------------

    Original Message


Related Content