Virtual TapeServer 6.04.05 for NonStop Servers Supplemental Installation Guide

26 | Enabling and Configuring Data Replication
4. Set up and authorize secure shell (SSH) if you are configuring VTS for AutoCopy or if you
wish to secure communication for Instant DR.
a. At the command prompt, become bill:
su - bill
b. Export the SSH socket by entering this command:
ssh-agent
Here is an example of the output:
SSH_AUTH_SOCK=/tmp/ssh-vHYet13854/agent.13854; export
SSH_AUTH_SOCK;
SSH_AGENT_PID=13855; export SSH_AGENT_PID;
c. Copy and paste the output to the command line, to run the commands.
d. Generate an authorization key for SSH for the target server, to authorize remote
access for the bill user:
ssh-keygen -t rsa
e. Press ENTER to save the file in the default location. This step creates the /home/bill/
.ssh/ directory.
f. Press ENTER to skip the pass phrase.
g. Press ENTER to verify skipping the pass phrase.
h. Copy the generated authorization key to the target server (boston):
ssh-copy-id –i /home/bill/.ssh/id_rsa.pub bill@boston
i. When prompted, enter yes.
j. Enter the password for the bill user at the target server.
Note If problems arise when using SSH with the target server, you can remove the
/home/bill/.ssh/known_hosts and /home/bill/.ssh/authorized_keys files from
the target and source servers and repeat the steps above.
5. If you configured SSH and access to the bill account is restricted on the VTS servers, you
must grant SSH access to the bill user for each VTS server. To do this, edit /etc/ssh/
sshd_config to add this line:
AllowUsers vtsa bill@source_svr
where source_svr is the IP address or hostname of the VTS server where the AutoCopy
operation is originating. For example, if the AutoCopy operation will originated on the
losangeles server, you must log in to the boston server and edit the file to allow access
from the losangeles server. To specify multiple servers, use wildcard characters in the
specified IP address or hostname, or specify a list of servers separated by spaces.
Also, if the following line is listed in the file, be sure to remove it:
DenyUsers bill
6. Check the SSH connection, if you configured SSH.
a. At the command prompt, log in.
b. Become bill:
su - bill