Jay,
Mike is right, SecureAdmin 1.0 is a product sold separately that installs a SSH server (Secure Shell protocol) on your filer running Data ONTAP 5.3.x. It supports SSH 1.x clients only.
It uses RSA for key echange (Host/Server key up to 1024 bits) and DES (56 bits) or 3DES for data encryption. Filer commands and your login name + password are therefore encrypted when passed over the network to your remote filer.
Also we cannot include it with Data ONTAP due to US encryption export regulations that apply to such products and royalties paid to RSA. Since June 2000, SecureAdmin 1.0 is also available to customers based oustide the US and Canada (except Government type of end-users)
Please contact your NetApp sales representative for more information on how to get a copy of SecureAdmin 1.0. and on exceptions that apply to certain Government type of end-users (Utilities, ISPs, Telcos, Health institutions, etc).
Nicolas.
Product Manager for System Management. Network Appliance. Sunnyvale, CA.
-----Original Message----- From: Mike Sphar [mailto:mikey@remedy.com] Sent: Monday, July 31, 2000 2:56 PM To: toasters@mathworks.com Subject: RE: What about SSH
If you're running Data ONTAP 5.3 or later, check the man page for SecureAdmin.
Just go to http://%5BYour_Filer_name%5D/na_admin/man/na_secureadmin.1.html
On Mon, Jul 31, 2000 at 04:44:18PM -0700, Philip, Nicolas wrote:
Jay,
Mike is right, SecureAdmin 1.0 is a product sold separately that installs a SSH server (Secure Shell protocol) on your filer running Data ONTAP 5.3.x. It supports SSH 1.x clients only.
It uses RSA for key echange (Host/Server key up to 1024 bits) and DES (56 bits) or 3DES for data encryption. Filer commands and your login name + password are therefore encrypted when passed over the network to your remote filer.
Hmm, when I was testing SecureAdmin, I determined that it supports password-only authentication. I called support and they confirmed it. If you're saying it's not so, then I should be able to create authorized_hosts file on the filer, right? Where would it be located?
Thanks
Igor