Originally posted by: SystemAdmin

Hello,
I just installed Openssh and Openssl to my VIO LPAR but when I go to create the security keys using the ssh-keygen command it fails and I noticed that the ssh-keygen file is empty. Can I reinstall the ssh-keygen file if so I am not sure where it comes from. I assume it is a part of the openssh install.

1. ls -al

total 4352
drwxr-xr-x 4 padmin staff 4096 May 20 13:15 .
drwxr-xr-x 9 bin bin 4096 May 19 16:04 ..
-rw-r--r-- 1 root staff 0 May 15 14:48 .255
lrwxrwxrwx 1 root system 21 Jan 20 12:42 .profile -> /usr/ios/cli/.profile
-rw------- 1 padmin staff 9952 May 20 13:39 .sh_history
drwxr-xr-x 2 root system 256 May 19 16:06 .ssh
-rw-r--r-- 1 root staff 0 May 15 14:48 45
-rw-r--r-- 1 root staff 0 May 15 14:48 5
-rw-r--r-- 1 root staff 0 May 15 14:48 6
-rw-r--r-- 1 root staff 0 May 15 14:48 7
drwxrwxr-- 2 root staff 256 Jul 1 2006 config
-rw-r--r-- 1 root staff 385441 Jan 20 14:28 install.log
-rw-r--r-- 1 root staff 4295 May 20 11:43 ioscli.log
-rw-r--r-- 1 root staff 0 May 8 13:57 rc.conf
-rw-r--r-- 1 padmin staff 1698981 May 20 13:26 smit.log
-rw-r--r-- 1 padmin staff 41283 May 20 13:19 smit.script
-rw-r--r-- 1 padmin staff 62253 May 20 13:19 smit.transaction
-rw-r--r-- 1 root staff 0 May 20 13:15 ssh-keygen
Kind Regards
#AIX-Forum

Originally posted by: SystemAdmin

Hi,

Were you attempting to create the ssh host keys, or the user keys? The host keys are stored in /etc/ssh, e.g.
-rw------- 1 root system 668 Jul 16 2007 ssh_host_dsa_key
-rw-r--r-- 1 root system 590 Jul 16 2007 ssh_host_dsa_key.pub

the user's private and public keys are stored in $HOME/.ssh, e.g.
-rw------- 1 spook staff 668 Oct 9 2007 id_dsa
-rw-r--r-- 1 spook staff 604 Oct 9 2007 id_dsa.pub

Run "whereis ssh-keygen" to find its location, and read the manual, this has details on how to create the keys but is cryptic (to say the least). Your $HOME/.ssh directory should have permissions of 700, though this probably does not matter as much on a VIO lpar.
#AIX-Forum

Originally posted by: nagger

This is not really AIX6 - it is!
It is the VIOS 2.1.

Have you installed the latest VIOS fix pack.

I noted several security fixes in it and may fix your issue and it is a common/easy thing to over look.
My upgrade to 2.1 took 2 hours and then the upgrade to the fix pack took a further 1.5 hours - it was a long night!
ta N
#AIX-Forum