IBM Support

Starting the OpenSSH Server (SSHD)

Troubleshooting


Problem

This document provides instructions to start the SSHD server on the operating system.

Resolving The Problem

Starting the OpenSSH Server (SSHD)

To start the SSHD, the following is required:

  • LPP 5722SS1 Option 30 (Qshell), Option 33 (Portable App Solutions Environment) and LPO 5733SC1 (IBM Portable Utilities for i5/OS).
  • A user profile 8 characters in length or less. If the user profile is longer than 8 characters, copy the profile to one that is 8 characters or less using the copy option on the WRKUSRPRF command.
  • The user profile starting the SSH daemon must have *ALLOBJ authority.

Step 1: Sign on a system running V5R4.

Step 2: On the operating system command line, run the CALL QP2TERM operating system command to enter the PASE environment. You are shown a screen similar to the following:

Screen shot of PASE command prompt.

Step 3: Run the change directory (cd) command to get into the proper directory to store the host keys. The correct syntax follows:
cd /QOpenSys/QIBM/UserData/SC1/OpenSSH/openssh-3.5p1/etc

Step 4: Invoke the ssh-keygen utility to generate the required host keys.

Note: The SSH daemon will not start on the operating system without having the host keys installed on the system.

ssh-keygen -t rsa1 -f ssh_host_key -N "" (Generates RSA1 key to be used with Version 1 of the SSH protocol)

ssh-keygen -t dsa -f ssh_host_dsa_key -N "" (Generates DSA key to be used with Version 2 of the SSH protocol)

ssh-keygen -t rsa -f ssh_host_rsa_key -N "" (Generates RSA key to be used with Version 2 of the SSH protocol)

Screen shot containing the ssh-keygen syntax and its output.
A continuation of the ssh-keygen syntax and its output.

Step 5: Start the SSH daemon. To run the SSH daemon on the operating system, run the following command:

QSH CMD('/QOpenSys/usr/sbin/sshd')

Step 6: To verifying that the SSH daemon is in a listen state and ready to accept incoming connections, run the following command:

NETSTAT *CNN

Screen shot of the ssh daemon in a listening state.

Note: In the local port column, port 22 or SSH signifies that the daemon is started.

[{"Product":{"code":"SWG60","label":"IBM i"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Component":"Communications-TCP","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"5.4.0","Edition":"","Line of Business":{"code":"LOB57","label":"Power"}}]

Historical Number

466547555

Document Information

Modified date:
18 December 2019

UID

nas8N1018826