[Contents] [Index]

About This Document >>     Installing SSH Tectia Server for IBM z/OS >>         System Requirements         Directories and Datasets>>         Installing the SSH Tectia Server for IBM z/OS Software >>             Required Permissions             Unpacking the Archive             Creating the SAMPLIB Directory             Preparing the System             Creating the SSHD2 User             Creating the /usr/lpp/ssh2 Directory             Running the Setup Script             Enabling Manual Pages         Upgrading the SSH Tectia Server for IBM z/OS Software         Removing the SSH Tectia Server for IBM z/OS Software     Using SSH Tectia Server for IBM z/OS >>     Configuring the Server >>     Configuring the Client >>     Authentication >>     Troubleshooting SSH Tectia Server for IBM z/OS >>     Examples of Use >>     Man Pages >>     Log Messages >>

Creating the SSHD2 User

The SSHD2 user is used to run the SSH Tectia Server and Certificate Validator. SSHD2 must have an OMVS segment and the UID 0. Further, if the BPX.DAEMON FACILITY class profile is defined, the user must have read access to it.

To create the SSHD2 user, use commands such as those in the ADDSSHD2 example located in /usr/lpp/ssh2/doc/zOS/SAMPLIB (shown below).

ADDSSHD2:

//* //* Define the user SSHD2 for running the SSH Tectia server //* //ADDSSHD2 EXEC PGM=IKJEFT01,DYNAMNBR=75,TIME=100,REGION=6M //SYSPRINT DD SYSOUT=* //SYSTSPRT DD SYSOUT=* //SYSTERM DD DUMMY //SYSTSIN DD * DELUSER SSHD2 ADDUSER SSHD2 + NAME('User SSHD2 for running SSH Tectia server') + OWNER(IBMUSER) + PASSWORD(INITPW) + TSO( + ACCTNUM(ACCT#) + PROC(ISPFPROC) + JOBCLASS(A) + MSGCLASS(X) + HOLDCLASS(X) + SYSOUTCLASS(X) + SIZE(40000) + MAXSIZE(0) ) + OMVS(HOME('/home/sshd2') + PROGRAM('/bin/sh') + UID(0) ) PERMIT JCL CLASS(TSOAUTH) ID(SSHD2) ACCESS(READ) PERMIT OPER CLASS(TSOAUTH) ID(SSHD2) ACCESS(READ) PERMIT ACCT# CLASS(ACCTNUM) ID(SSHD2) ACCESS(READ) PERMIT ISPFPROC CLASS(TSOPROC) ID(SSHD2) ACCESS(READ) PERMIT BPX.DAEMON CLASS(FACILITY) ID(SSHD2) ACCESS(READ) SETROPTS REFRESH RACLIST(TSOPROC) SETROPTS REFRESH RACLIST(TSOAUTH) SETROPTS REFRESH RACLIST(ACCTNUM) SETROPTS REFRESH RACLIST(FACILITY) /*