[Contents] [Index]

About This Document >>     Installing SSH Tectia Server (M) >>         System Requirements         Directories and Datasets>>         Installing the SSH Tectia Server (M) Software >>             Required Permissions             Preparing the System             Unpacking the Archive             Creating the SSHD2 User             Creating the /usr/lpp/ssh2 Directory             Running the Setup Script             Creating the Server Host Key Pair             Enabling Manual Pages             Securing the Server         Upgrading the SSH Tectia Server (M) Software         Removing the SSH Tectia Server (M) Software     Using SSH Tectia Server (M) >>     Troubleshooting SSH Tectia Server (M) >>     Configuration >>     Authentication >>     Application Tunneling >>     Sample Files >>     Man Pages     Log Messages >>

Securing the Server

TCP Permissions

The server, sshd2, listens on a configured TCP port (the default is 22) and creates processes to handles connections from users.

The server must be allowed to listen on port 22 (or whichever the configured Secure Shell port is). If the installation controls access to TCP/IP stacks, ports, or networks, the user account under which the master AS is run must be given sufficient authorization. The resources in question belong to the SERVAUTH class.

If RESTRICTLOWPORTS is specified in IPCONFIG or TCPCONFIG, and SAF authorization (see above) is not used, the server must be APF-authorized.