OpenSSH ssh-keygen and sshd won't work

[andy.tompkins at autozone.com]

Also, for anyone having trouble with /dev/random and /dev/urandom on AIX
5.2, you can check to see if the random module is loaded with "genkex|grep
rand", and you can rm the devices and have the system re-create them with
"randomctl -l".

Andy



|---------+--------------------------------------------------------------->
|         |           Darren Tucker <dtucker at zip.com.au>                  |
|         |           Sent by:                                            |
|         |           openssh-unix-dev-bounces+andy.tompkins=autozone.com@|
|         |           mindrot.org                                         |
|         |                                                               |
|         |                                                               |
|         |           04/20/2005 06:03 AM                                 |
|---------+--------------------------------------------------------------->
  >----------------------------------------------------------------------------------------------|
  |                                                                                              |
  |       To:       rschubnell at paninfo.com                                                       |
  |       cc:       openssh-unix-dev at mindrot.org                                                 |
  |       Subject:  Re: OpenSSH ssh-keygen and sshd won't work                                   |
  >----------------------------------------------------------------------------------------------|




rschubnell at paninfo.com wrote:
> I've Problems with my openssh installation on AIX 5.2.
> My ssh-keygen and sshd won't work.
> The Installation of AIX was proper migrated from aix4.3.3 to aix5.2
[...]
> # /usr/bin/ssh-keygen -q -t rsa -f /etc/ssh/ssh_host_rsa_key -C
> ^C ( after 10 Minutes ;-> )

Sounds like a problem with the entropy source.  AIX 5.2 has /dev/random
and /dev/urandom, but I have seen one report about an AIX upgrade
leaving those with incorrect permissions, I suggest you check those
first.  They should be:

$ ls -l /dev/*rand*
crw-r--r--   1 root  system   42,  0 Jul 01 2003  /dev/random
crw-r--r--   1 root  system   42,  1 Jul 01 2003  /dev/urandom

Failing that, does "openssl rand -base64 32" also hang?

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev at mindrot.org
http://www.mindrot.org/mailman/listinfo/openssh-unix-dev