Your browser does not allow this site to store cookies and other data. Some functionality on this site may not work without them. See Privacy Policy for details on how we would use cookies.

SSH Tectia 
PreviousNextUp[Contents] [Index]

    About This Document >>
    Installing SSH Tectia Server for IBM z/OS >>
        System Requirements
        Directories and Datasets>>
        Installing the SSH Tectia Server for IBM z/OS Software >>
            Required Permissions
            Unpacking the Archive
            Creating the SAMPLIB Directory
            Preparing the System
            Creating the SSHD2 User
            Creating the /usr/lpp/ssh2 Directory
            Running the Setup Script
            Enabling Manual Pages
        Upgrading the SSH Tectia Server for IBM z/OS Software
        Removing the SSH Tectia Server for IBM z/OS Software
    Using SSH Tectia Server for IBM z/OS >>
    Configuring the Server >>
    Configuring the Client >>
    Authentication >>
    Troubleshooting SSH Tectia Server for IBM z/OS >>
    Examples of Use >>
    Man Pages >>
    Log Messages >>

Creating the SSHD2 User

The SSHD2 user is used to run the SSH Tectia Server and Certificate Validator. SSHD2 must have an OMVS segment and the UID 0. Further, if the BPX.DAEMON FACILITY class profile is defined, the user must have read access to it.

To create the SSHD2 user, use commands such as those in the ADDSSHD2 example located in /usr/lpp/ssh2/doc/zOS/SAMPLIB (shown below).

ADDSSHD2:

//*
//* Define the user SSHD2 for running the SSH Tectia server
//*
//ADDSSHD2 EXEC PGM=IKJEFT01,DYNAMNBR=75,TIME=100,REGION=6M
//SYSPRINT DD  SYSOUT=*
//SYSTSPRT DD  SYSOUT=*
//SYSTERM  DD  DUMMY
//SYSTSIN  DD *
  DELUSER SSHD2
  ADDUSER SSHD2 +
    NAME('User SSHD2 for running SSH Tectia server') +
    OWNER(IBMUSER) +
    PASSWORD(INITPW) +
    TSO( +
      ACCTNUM(ACCT#) +
      PROC(ISPFPROC) +
      JOBCLASS(A) +
      MSGCLASS(X) +
      HOLDCLASS(X) +
      SYSOUTCLASS(X) +
      SIZE(40000) +
      MAXSIZE(0) ) +
    OMVS(HOME('/home/sshd2') +
      PROGRAM('/bin/sh') +
      UID(0) )
  PERMIT   JCL        CLASS(TSOAUTH) ID(SSHD2) ACCESS(READ)
  PERMIT   OPER       CLASS(TSOAUTH) ID(SSHD2) ACCESS(READ)
  PERMIT   ACCT#      CLASS(ACCTNUM) ID(SSHD2) ACCESS(READ)
  PERMIT   ISPFPROC   CLASS(TSOPROC) ID(SSHD2) ACCESS(READ)
  PERMIT   BPX.DAEMON CLASS(FACILITY) ID(SSHD2) ACCESS(READ)
  SETROPTS REFRESH    RACLIST(TSOPROC)
  SETROPTS REFRESH    RACLIST(TSOAUTH)
  SETROPTS REFRESH    RACLIST(ACCTNUM)
  SETROPTS REFRESH    RACLIST(FACILITY)
/*

PreviousNextUp[Contents] [Index]


[ Contact Information | Support | Feedback | SSH Home Page | SSH Products ]

Copyright © 2006 SSH Communications Security Corp.
This software is protected by international copyright laws. All rights reserved.
Copyright Notice

===AUTO_SCHEMA_MARKUP===