Originally posted by: SystemAdmin

efskeymgr -P $HOME/.ssh/authorized_keys

Encryption framework returned an error: (libefs bad parameter)

Password is correct since it's the same one which works with, say,
efskeymgr -o ksh

authorized_keys is fine since I just logged in with the SSH key.

oslevel -s
6100-04-03-1009

Any ideas what's wrong?
#AIX-Forum

Originally posted by: SystemAdmin

openssh.base.server 5.2.0.5300
#AIX-Forum

Originally posted by: dukessd

Looks a bit like your libefs is too new for the ssh level - which is rather old, I'd try later ssh / ssl if poss and then see what you get.
#AIX-Forum

Originally posted by: SystemAdmin

Thanks for the reply. Our Operations team is willing to upgrade to latest OpenSSH, but I think we're only one level back (it was installed in June).

I've heard from some other IBM folks who seem to think it's an issue with the EFS installation or configuration. Will try to update here if/when we resolve it.
#AIX-Forum

Originally posted by: SystemAdmin

I was using a key generated by puTTY a few years ago. When I tried a brand new key generated by ssy-keygen on the specific system, the command worked.

Tried messing with key sizes, but that didn't matter. Support tells me that OpenSSH 5.2 keys have been problematic in the past too.

Guess I'll be replacing my key on a handful of systems.
#AIX-Forum

Originally posted by: SystemAdmin

FYI, brand new key generated by latest PuTTY didn't work either.
#AIX-Forum

Originally posted by: SystemAdmin

Ok, I think the real problem is that I didn't realize this capability requires an AIX/IBM-specific SSH feature. That is, it's not going to work between my PuTTY and an AIX system anyway.
#AIX-Forum