Originally posted by: SystemAdmin

I tried to stop the sshd, but before I use "lssrc -s ssh" at root to check the status. On my Prod box (both prod and Dev are AIX 5.3 L, Prod is ML-5003, Dev is ML 5005), I got message

1. lssrc -s sshd

0513-085 The sshd Subsystem is not on file.
on Dev, I can get the status listed

1. lssrc -s sshd

Subsystem Group PID Status
The /usr/bin or /user/local/bin are both in the env. So what I miss here?

Originally posted by: SystemAdmin

Is it installed:

$ lslpp -l openssh.base.server
Fileset Level State Description

---

Path: /usr/lib/objrepos
openssh.base.server 4.3.0.5301 COMMITTED Open Secure Shell Server

Path: /etc/objrepos
openssh.base.server 4.3.0.5301 COMMITTED Open Secure Shell Server
$ lssrc -s sshd
Subsystem Group PID Status
sshd ssh 520224 active
$ ps -ef | grep ssh
root 245866 520224 0 17:19:11 - 0:00 sshd: jwtesch priv
jwtesch 507912 245866 1 17:19:25 - 0:00 sshd: jwtesch@pts/2
root 520224 204944 0 17:16:01 - 0:01 /usr/sbin/sshd

Originally posted by: SystemAdmin

1. lslpp -l openssh.base.server

lslpp: 0504-132 Fileset openssh.base.server not installed.

1. lslpp -l openssh.base.client

lslpp: 0504-132 Fileset openssh.base.client not installed.

but how I can still run my ssh? on my Prod box. It has been there for a year. I installed it by download copy, not form the IBM expansion package CD.

How can I correct this problem?

Originally posted by: SystemAdmin

You should get the latest version anyway. What you have is likely the older version 'rpm' based version. Now I'm assuming you are at AIX 5.3.

If you have the latest AIX Install CDs with the expansion pack and Linux Toolkit, then this is easy:

smitty install
- Install and update software
- Install Software Bundle
- Choose CD
- Choose openSSH server (I think this will drag in the client)
- Press enter
- ACCEPT new license agreements? yes
- This will prompt you to change CDs and insert the Linux Toolkit first and then the expansion pack

• Then you just follow instructions and it should all install with no problems.

• Otherwise do this ----

https://sourceforge.net/projects/openssh-aix/ has the latest ssh code

http://www-03.ibm.com/servers/aix/products/aixos/linux/download.html - Choose AIX Toolbox Cryptographic Content to get ssl

Downloaded filesets then installed:
rpm -U zlib-1.2.3-3.aix5.1.ppc.rpm (I already had this installed)

1. ls prn*

prngd-0.9.29-1.aix5.1.ppc.rpm

1. rpm -i prngd-0.9.29-1.aix5.1.ppc.rpm

0513-059 The prngd Subsystem has been started. Subsystem PID is 409670.

1. ls openssl*

openssl-0.9.7l-1.aix5.1.ppc.rpm openssl-doc-0.9.7l-1.aix5.1.ppc.rpm
openssl-devel-0.9.7l-1.aix5.1.ppc.rpm

1. rpm -i openssl-0.9.7l-1.aix5.1.ppc.rpm

#

1. rpm -qa | grep open

openssl-0.9.7l-1

1. ls openssh*

openssh-4.3p2-r2.tar.Z

1. uncompress openssh*Z
2. ls openssh*

openssh-4.3p2-r2.tar

1. mkdir openssh
2. cd openssh

1. ls ../openssh*

../openssh-4.3p2-r2.tar

../openssh:

1. tar xvf ../openssh-4.3p2-r2.tar

1. smitty install_all

INPUT device / directory for software [.] (I put a period in the square brackets)

Then use F7 to select the ssh packages
ACCEPT new license agreements? yes

Press enter

Command: OK stdout: yes stderr: no

Before command completion, additional instructions may appear below.

TOP
geninstall -I "a -cgNqwXY -J" -Z -d . -f File 2>&1

File:
I:openssh.base.client 4.3.0.5301
I:openssh.base.server 4.3.0.5301
I:openssh.license 4.3.0.5301
-----------------------------------------------------------------------------
Pre-installation Verification...
-----------------------------------------------------------------------------
Verifying selections...done
http://MORE...137

Name Level Part Event Result

---

openssh.license 4.3.0.5301 USR APPLY SUCCESS
openssh.base.client 4.3.0.5301 USR APPLY SUCCESS
openssh.base.server 4.3.0.5301 USR APPLY SUCCESS
openssh.base.client 4.3.0.5301 ROOT APPLY SUCCESS
openssh.base.server 4.3.0.5301 ROOT APPLY SUCCESS

File /etc/group has been modified.
File /etc/passwd has been modified.

One or more of the files listed in /etc/check_config.files have changed.
http://MORE...2

It is now installed and ready to confure:

1. rpm -qa | grep open

openssl-0.9.7l-1

1. lslpp -l | grep open

openssh.base.client 4.3.0.5301 COMMITTED Open Secure Shell Commands
openssh.base.server 4.3.0.5301 COMMITTED Open Secure Shell Server
openssh.license 4.3.0.5301 COMMITTED Open Secure Shell License
openssh.base.client 4.3.0.5301 COMMITTED Open Secure Shell Commands
openssh.base.server 4.3.0.5301 COMMITTED Open Secure Shell Server