Fujitsu SPARC Enterprise M3000 Xscf Reference Manual page 311

EXTENDED
■
DESCRIPTION
■
■
■
■
■
■
■
■
EXAMPLES
EXAMPLE 1
EXAMPLE 2
If you are an Active Directory or LDAP/SSL user, you cannot register the user
piblic key. Log in to the XSCF network through the SSH service by the
authentication not with the user public key but with the password.
The XCP 1110 firmware is the first XCP release to support the 2048-bit RSA host
public key.
If you replace an XSCF unit that has a 2048-bit RSA host public key registered
with an XSCF unit running firmware older than XCP 1110, a warning message is
displayed stating that the host key is not supported. Also, a 1024-bit RSA host
key is regenerated at the time of the SSH connection. After the firmware is
upgraded to a release no older than XCP 1110, the message will no longer be
displayed and a 2048-bit RSA host public key will be restored at SSH connection.
When a host public key is created, a prompt to confirm execution of the
command with the specified options is displayed. Enter "y" to execute the
command or "n" to cancel the command.
When a host public key already exists, if you generate a host public key, a
prompt to confirm the update is displayed. Enter "y" to update or "n" to cancel
the command.
The setssh(8) command can register one user public key at a time.
In time of setssh(8) command execution, finish the input of user public key by
pressing Enter and then pressing "Ctrl" and "D" (EOF).
In case the XSCF unit is duplicated configuration, the setting automatically
reflected to the standby XSCF. When there is a defect on the standby XSCF, it
leads to an error and the setting will be reflected to the active XSCF only.
When you use the setssh(8) command to generate a host public key or to
disable the SSH service (setssh -c disable), the command takes effect
immediately. In case of disabling the SSH service, any open SSH sessions are
terminated.
For all other settings using the setssh(8) command, you must reboot the XSCF
using rebootxscf(8) command for the changes to take effect.
Using the showssh(8) command, you can check the current settings of the SSH
service.
Starts the SSH service.
XSCF> setssh -c enable
Continue? [y|n] :y
Please reset the XSCF by rebootxscf to apply the ssh settings.
Starts the SSH service. Automatically replies with "y" to the prompt.
XSCF> setssh -y -c enable
Continue? [y|n] :y
Please reset the XSCF by rebootxscf to apply the ssh settings.
setssh(8)
System Administration 297