[Contents] [Index]

About This Document >>     Installing SSH Tectia Server for IBM z/OS >>     Getting Started with SSH Tectia Server for IBM z/OS >>         Running the Server >>             Starting sshd2 Manually under USS             Running sshd2 as a Started Task             Restarting and Stopping sshd2             Starting ssh-certd Manually under USS             Running ssh-certd as a Started Task             Restarting and Stopping ssh-certd         Environment Variables for Server and Client Applications         Setting Up a Shell User>>     Configuring the Server >>     Authentication >>     File Transfer Using SFTP >>     Secure File Transfer Using Transparent FTP Security >>     Tunneling >>     Troubleshooting SSH Tectia Server for IBM z/OS >>     Man Pages and Default Configuration Files >>     Log Messages >>

Running ssh-certd as a Started Task

To run ssh-certd as a started task, use a JCL procedure such as SSHCERTD from SAMPLIB (shown below). The JCL must be installed in the procedure library.

SSHCERTD:

//RUNCRTD PROC F=START //SSHCRTD EXEC PGM=BPXBATCH,REGION=0M,TIME=NOLIMIT, // PARM='PGM /bin/sh /opt/tectia/etc/init.d/ssh-certd // &F foreground' //STDOUT DD PATH='/tmp/SSHD2-certd.out', // PATHOPTS=(OWRONLY,OCREAT,OTRUNC), // PATHMODE=(SIRUSR,SIWUSR) //STDERR DD PATH='/tmp/SSHD2-certd.err', // PATHOPTS=(OWRONLY,OCREAT,OTRUNC), // PATHMODE=(SIRUSR,SIWUSR) //STDIN DD DUMMY // PEND

Start the Certificate Validator with the following operator command:

== > s sshcertd 

The sshcertd job starts.

In the sample SSHCERTD script above, ssh-certd is started with the foreground option that disables the daemon mode. With the foreground option, the daemon does not spawn the process to background and the task name stays as sshcertd.

You can assign the user SSHD2 to the started task by defining the procedure in the STARTED class and entering the user ID in the STDATA segment, for example:

RDEFINE STARTED SSHCERTD.* STDATA(USER(SSHD2)GROUP(SYS1))
SETROPTS RACLIST REFRESH 

For more information, see Appendix ssh-certd.