[Contents] [Index]

About This Document >>     Installing SSH Tectia Server for IBM z/OS >>         Preparing for Installation >>         Upgrading Previously Installed Secure Shell Software >>         Installing the SSH Tectia Server for IBM z/OS Software >>             Unpacking the Installation Package             Creating the SAMPLIB and PARMLIB Datasets             Preparing the System             Creating the SSHD2 User             Creating the /opt/tectia Directory             Running the Setup Script             Enabling Manual Pages         Removing the SSH Tectia Server for IBM z/OS Software     Getting Started with SSH Tectia Server for IBM z/OS >>     Configuring the Server >>     Authentication >>     System Administration >>     File Transfer Using SFTP >>     Secure File Transfer Using Transparent FTP Security >>     Tunneling >>     Troubleshooting SSH Tectia Server for IBM z/OS >>     Man Pages and Default Configuration Files >>     Log Messages >>

Creating the SSHD2 User

The SSHD2 user is used to run the SSH Tectia Server and Certificate Validator. SSHD2 must have an OMVS segment and the UID 0. Further, if the BPX.DAEMON FACILITY class profile is defined, the user must have read access to it.

Caution: The SSHD2 user must not have SURROGATE rights. With those rights, the user could log in using an empty password, which is not desirable.

To create the SSHD2 user, use commands such as those in the ADDSSHD2 example located in the doc/zOS/SAMPLIB directory (shown below).

ADDSSHD2:

//ADDSSHD2 EXEC PGM=IKJEFT1A,DYNAMNBR=75,TIME=100,REGION=6M //SYSPRINT DD SYSOUT=* //SYSTSPRT DD SYSOUT=* //SYSTERM DD DUMMY //SYSTSIN DD * ADDUSER SSHD2 + NAME('User SSHD2 for running SSH Tectia server') + OWNER(IBMUSER) + NOPASSWORD NOOIDCARD + OMVS(PROGRAM('/bin/false') UID(0)) PERMIT BPX.DAEMON CLASS(FACILITY) ID(SSHD2) ACCESS(READ) SETROPTS REFRESH RACLIST(FACILITY) /*