UNIX and Linux targets

To remotely install the IBM® BigFix® Remote Control target software on a Linux or UNIX computer, you must ensure that SSH is installed and enabled on any target you want to access by using SSH protocol. OpenSSH 3.71 or higher, contains security enhancements not available in earlier releases.

Connections cannot be established with any UNIX® targets that have all remote access protocols, rsh, rexec, or SSH disabled.

In all UNIX environments except Solaris, the Bourne shell (sh) is used as the target shell. On Solaris targets, the Korn shell (ksh) is used instead due to problems encountered with sh.

To communicate with Linux® and other SSH targets by using password authentication, you must edit the file /etc/ssh/sshd_config file on target computers and set:

PasswordAuthentication yes

The default value is no.

After you change this setting, stop and restart the SSH daemon by using the following commands:

/etc/init.d/sshd stop

To use SFTP for file transfers, in addition to calling SSHProtocol.setUSESFTP(true), make sure that the SFTP server is enabled on the target computer. Make sure that the line that enables the sftp-server subsystem is not commented out, and that it points to the specific operating system location of the sftp-server subsystem.

For example:

Subsystem sftp /[OS-specific path]

• Solaris: /usr/lib/ssh/sftp-server
• Linux: /usr/libexec/openssh/sftp-server
• HP-UX: /opt/ssh/libexec/sftp-server
• AIX®: /usr/sbin/sftp-server