IT Process Automation

  • Private Community

  • 1.  IT PAM Login to AIX Server

    Posted Apr 24, 2018 03:01 PM

    Does CA IT PAM support these versions of Open Secure Shell:

      openssh.base.client        7.5.102.1100  COMMITTED  Open Secure Shell Commands

      openssh.base.server      7.5.102.1100  COMMITTED  Open Secure Shell Server

      openssl.base                  1.0.2.1300  COMMITTED  Open Secure Socket Layer

     

    We recently upgraded our environment and login is not possible anymore.

    Will these version cause imcompatibility issue ?



  • 2.  Re: IT PAM Login to AIX Server

    Broadcom Employee
    Posted May 09, 2018 10:15 AM

    What version of Process Automation are you on? 

    I do not have specific information that those version of OpenSSH will be supported, but we did work in 4.3 sp1 and 4.3 sp2 to add additional ssh support, and fix an issue or two we encountered with ssh connectivity.



  • 3.  Re: IT PAM Login to AIX Server

    Posted May 10, 2018 10:03 AM

    Take a look at What's in CA Process Automation 04.3.02 ? - CA Process Automation - 04.3.02 - CA Technologies Documentation . PAM 4.3.02 provides support for recent OpenSSH versions. Try the following troubleshooting steps:

    1. Upgrade PAM to 4.3.02

    2. As 'root' run the sshd -T command on the AIX server and compare the output with another server which is working. Sometimes, the CIPHER and Key-Exchange algorithms can differ between OpenSSH versions.