Secure Shell (SSH) in HP Systems Insight Manager 5.1 and 5.2

19
mxnodesecurity
a
p ssh
c <username
>:<password>
n <managed system>
This form of the command is used to save an SSH user name and password for use with a specific
managed system. For example the following command cause HP SIM to use the password ‘mypwd’
whenever a task for user ‘administr
ator’ is run on system ‘brian06’:
mxnodesecurity
a
p ssh
c administrator:mypwd
n brian06.hp.com
Note that this password is only used if user key and host based authentication have failed, and only if
the user name for the task matches this entry.
mxn
odesecurity
l
p ssh [
n <managed system>]
This form of the command lists the SSH credentials for the specified system, or all systems if a system
is not specified. For example the following command lists the SSH credentials for node brian06 (note
that
the password itself is not displayed):
C:
\
> mxnodesecurity
-
l
-
p ssh
n brian06.hp.com
TARGET NODE PROTOCOL NAME PASSWORD
harrison.cup.hp.com ssh administrator ********
Install OpenSSH
The HP SIM Deploy tools can be used to install Op
enSSH on any Windows platform
(
Deploy
Drivers, Firmware and Agents
Install OpenSSH
).
After installing the OpenSSH software, the tool configures the installation. The user name specified
when running the tool and the administrator user name (which migh
t have been renamed from
Administrator) to the passwd file. The tool then runs mxagentconfig for these users to allow this CMS
access through user public key authentication: the public key of the CMS is added to the
authorized_keys2
file for each user.
Configure or Repair Agents
The Configure or Repair Agents tool (
Configure
Configure Or Repair Agents
) enables you
to configure a number of agent settings, including SSH.
An option allows either host
-
based or user public key authentication to be used,
and the tool adds the
CMS public key to the appropriate file. For a Windows system this tool also adds the specified user
to the passwd file, and ensures that the administrator user has SSH access in addition to the specified
user.