On a similar note, I've been trying to get user-level auditing working
using ssh. When you telnet in, it logs actions under your userid, but
when you ssh in, it logs everything as root. (Presumably because sshd
is running as root?)
Has anyone else had this problem, or know of a workaround?
This is 6.5X18
-Mike
-----Original Message-----
From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com]
On Behalf Of Thorsten.Lemke@computacenter.com
Sent: Thursday, October 28, 2004 1:36 AM
To: bparent@calvin.ucsd.edu
Cc: toasters@mathworks.com
Subject: Re: ssh scripts
You need to create a proper directory structure in your filers' /etc
first
to access it via ssh without a password:
Create /etc/sshd/<username>/.ssh/authorized_keys and paste the public
key
of the accessing host in that file.
<username> has to be the user on the remote host that is used to
transmit
the ssh command.
I did not find a way to make SecureAdmin or ONTAP create that file
automatically yet...
With the option "ssh.pubkey_auth.enable" activated, the user now
authenticates without a password.
Thorsten
Brian Parent bparent@calvin.ucsd.edu@mathworks.com on 28.10.2004
01:07:57
Sent by: owner-toasters@mathworks.com
To: Netapp toasters@mathworks.com
cc:
Subject: Re: ssh scripts
------------------------------------------------------------------------
--
Can anyone on this list confirm whether ssh can be used in place of
rsh (after purchasing SecureAdmin ofcourse), without requiring the
use of a password? It appears to be the case, based on the existence
of the options "ssh.pubkey_auth.enable" as well as
"ssh.passwd_auth.enable"
on my DOT 6.4.5 systems. I'd just like to make sure before buying
the SecureAdmin software because I'd rather not bother if I have to
stuff the password into an expect script somewhere.
Re:
> Date: Wed, 27 Oct 2004 21:07:52 +0200
> From: Stefan Funke
bundy@arcor-ip.de
> To: Robert Borowicz
rbaus@swbell.net
> Cc: Netapp
toasters@mathworks.com
> Subject: Re: ssh scripts
>
> Quoting message received from Robert Borowicz:
>
> > I want to work with our DBA's to put our Oracle instances in Hot
> > Standby to grab snapshots. Anybody got a script they use that
utilizes
> > SSH to run the snap command on a filer?
>
>
http://www.netapp.com/tech_library/3130.html
>
> show it to your dba's and replace rsh with ssh.
COMPUTACENTER (UK) LTD
The contents of this e-mail are intended for the named addressee only.
It contains information which may be confidential and which may also be
privileged.
Unless you are the named addressee (or authorised to receive
for the addressee) you may not copy or use it, or disclose it to anyone
else. If you received it in error please notify us immediately and then
destroy it.
Computacenter information is available from
http://www.computacenter.com
This footnote also confirms that this email message has been swept for
the presence of computer viruses.
************************************************************************
***************************************************
Michael Christian