Virtual TapeServer 8.3 Configuration Guide

Enabling and Configuring Role Swapping | 67
5. If you configured SSH and access to the bill account is restricted on the VTS servers, you must
grant SSH access to the bill user for each VTS server. To do this, become root (enter su -
root) and then edit /etc/ssh/sshd_config to add this line:
AllowUsers vtsa bill@source_svr
where source_svr is the IP address or hostname of the VTS server where the AutoCopy
operation is originating. For example, if the AutoCopy operation will originated on the
losangeles server, you must log in to the boston server and edit the file to allow access from
the losangeles server. To specify multiple servers, use wildcard characters in the specified IP
address or hostname, or specify a list of servers separated by spaces.
Also, if the following line is listed in the file, be sure to remove it:
DenyUsers bill
6. Check the SSH connection, if you configured SSH.
a. At the command prompt, log in.
b. Become bill:
su - bill
c. At the command prompt, enter ssh user@server uptime. For example, on the Boston
server, enter ssh bill@boston uptime.
The first time you enter an ssh command, a message similar to the following is
displayed:
The authenticity of host 'server_name (IP_addr)' can't be
established.
RSA key fingerprint is
5f:10:3c:47:78:8f:e3:28:9d:ab:6b:34:ed:d1:e4:08.
Are you sure you want to continue connecting (yes/no)?
Enter yes.
d. Repeat these steps on each VTS server.
Note SSH can be setup for one direction or multiple directions. If multiple directions are
configured, these steps should be executed from the other direction.