Secure Shell (SSH) in HP Systems Insight Manager 5.1 and 5.2

22
The following rights are automatically added during OpenSSH installation:

Log on as a service

Create a token object

Replace a process lev
el token
Note:
Sometimes a domain policy can prevent HP SIM from adding these rights to the installing user.
HP SIM must be installed by a user who has these rights.
Installation Diagnostic File for SSH
When installation issues for the SSH portion of th
e HP SIM installation occur, the first location you
should look in is the
initconfig.log
file. This file is located
C:
\
Program Files
\
HP
\
Systems
Insight Manager
\
logs
and might provide clues.
Coexistence problems with other Cygwin installations
Multiple Cyg
win
-
based programs can be installed but only one version of Cygwin is used. During the
HP SIM installation, the OpenSSH installer checks in the registry for an existing Cygwin and if found
the installation fails.
There are certain registry settings that m
ust exist for Cygwin to function, namely the mount points
previously defined. The OpenSSH installer checks for the Cygwin registry keys and refuses to install if
they exist. The installation also fails if the full Cygwin distribution or any other software
that uses
Cygwin is installed. For example, Python distribution in WinCVS uses Cygwin. This is an unfortunate
consequence of multiple Cygwin installations not being able to coexist.
There are other products in the market that use Cygwin, and HP SIM’s OpenS
SH distribution is not
compatible with them. This includes other freely available OpenSSH distributions. If you are already
using another version of OpenSSH and do not want to install the HP SIM version, you can do so.
However, you must keep in mind that t
he HP SIM version is the only version that restricts access to the
Cygwin data structures.
If you are having trouble getting the HP SIM OpenSSH package to install, search your system for the
Cygwin registry keys, as well as the
cygwin1.dll
file. The locati
on of the file might give you some
idea of what software is installed that is conflicting with the OpenSSH installation.
Home Directory
When troubleshooting user authentication, one thing to check is the capitalization of the home
directory, which is store
d in the passwd file. OpenSSH is case
-
sensitive in this regard, so
/home/HPsimUser is not the same as /home/hpsimuser. Check that the capitalization in the
password file is the same as the directory to which it refers and that the directory is indeed the c
orrect
directory for that user.
The following is a sample passwd entry. The second
-
to
-
last field specifies the home directory, where
home is the
Documents and Settings
directory:
Note:
This would occur on a single line with no new lines.
Administrator:u
nused_by_nt/2000/xp:500:513:U
-
PCDLONG2
\
Administrator,S
-
1
-
5
-
21
-
3769691966
-
4004114397
-
3833753107
-
500:/home/Administrator:/bin/switch
Documents and Settings directory on Windows installations
When a user account is created on a Windows system, the home direct
ory for the account is not
created until the user logs into the system for the first time. If this directory is also used for SSH access
the lack of the account name under
C:
\
Documents and Settings
can cause problems.
The
sshuser
utility supplied with HP
SIM works around this problem by specifying a common
directory for all SSH users. This directory,
hpsimssh
, is created by HP SIM in the Documents and