Virtual TapeServer 8.0 Supplemental Installation Guide

24 | Enabling and Configuring AutoCopy and Instant DR
4. Set up and authorize secure shell (SSH) if you are configuring VTS for AutoCopy or if you
wish to secure communication for Instant DR.
a. At the command prompt, become bill:
su - bill
b. Copy and paste the output to the command line, to run the commands.
c. Generate an authorization key for SSH for the target server, to authorize remote
access for the bill user:
ssh-keygen -t rsa
d. Press ENTER to save the file in the default location. This step creates the /home/bill/
.ssh/ directory.
e. Press ENTER to skip the pass phrase.
f. Press ENTER to verify skipping the pass phrase.
g. Copy the generated authorization key to the target server (boston):
ssh-copy-id –i /home/bill/.ssh/id_rsa.pub bill@boston
h. When prompted, enter yes.
i. Enter the password for the bill user at the target server.
Note If problems arise when using SSH with the target server, you can remove the
/home/bill/.ssh/known_hosts and /home/bill/.ssh/authorized_keys files from
the target and source servers and repeat the steps above.
5. If you configured SSH and access to the bill account is restricted on the VTS servers, you
must grant SSH access to the bill user for each VTS server. To do this, become root (enter
su - root) and then edit /etc/ssh/sshd_config to add this line:
AllowUsers vtsa bill@source_svr
where source_svr is the IP address or hostname of the VTS server where the AutoCopy
operation is originating. For example, if the AutoCopy operation will originated on the
losangeles server, you must log in to the boston server and edit the file to allow access
from the losangeles server. To specify multiple servers, use wildcard characters in the
specified IP address or hostname, or specify a list of servers separated by spaces.
Also, if the following line is listed in the file, be sure to remove it:
DenyUsers bill
6. Check the SSH connection, if you configured SSH.
a. At the command prompt, log in.
b. Become bill:
su - bill
c. At the command prompt, enter ssh user@server uptime. For example, on the Boston
server, enter ssh bill@boston uptime.
The first time you enter an ssh command, a message similar to the following is
displayed:
The authenticity of host 'server_name (IP_addr)' can't be
established.