Your browser does not allow storing cookies. We recommend enabling them.

SSH Tectia 
PreviousNextUp[Contents] [Index]

    About This Document >>
    Installing SSH Tectia Server for IBM z/OS >>
        Preparing for Installation >>
            System Requirements
            Permission Requirements
            Directories and Datasets
        Installing the SSH Tectia Server for IBM z/OS Software >>
    Getting Started with SSH Tectia Server for IBM z/OS >>
    Setting up Non-Interactive Server and User Authentication >>
    Setting up Non-Interactive File Transfer >>

Permission Requirements

The following permissions are required for installing and running SSH Tectia Server for IBM z/OS:

  • File system requirements

    Write access to the /usr/lpp and /etc directories is required during the installation.

  • User account requirements for installing the server

    • The setup script uses the extattr command to make the server program, /usr/lpp/ssh2/sbin/sshd2, program-controlled. To issue the command, the user account running the setup must have read access to the BPX.FILEATTR.PROGCTL facility.
    • The user account running the setup must have an OMVS segment and the UID 0.

  • User account requirements for running the server

    It is recommended that a user account, SSHD2, is created for running SSH Tectia Server for IBM z/OS, see Section Creating the SSHD2 User:

    • The user account running the server must have an OMVS segment and the UID 0.
    • If the BPX.DAEMON FACILITY class profile is defined, the user must have read access to it.

  • User account requirements for using SSH Tectia client programs

    • Required: An OMVS segment
    • Optional: A home directory, needed only for storing host keys or public keys

  • Library requirements

    • CEE.SCEERUN and CEE.SCEERUN2 libraries must be available in LPALIB or LNKLST.
    • CEE.SCEERUN2 must be program-controlled.

  • TCP permissions

    The server must be allowed to listen to port 22 (or other configured Secure Shell port).

  • Permissions for storing keys in SAF

    If the server host key or the user keys are going to be stored in the System Authorization Facility (SAF), additional permissions are required.

PreviousNextUp[Contents] [Index]

[ Contact Information | Support | Feedback | SSH Home Page | SSH Products ]

Copyright © 2007 SSH Communications Security Corp.
This software is protected by international copyright laws. All rights reserved.
Copyright Notice




What to read next:

  • Reduce Secure Shell risk. Get to know the NIST 7966.

    The NISTIR 7966 guideline from the Computer Security Division of NIST is a direct call to action for organizations regardless of industry and is a mandate for the US Federal government.
    Download now
  • ISACA Practitioner Guide for SSH

    With contributions from practitioners, specialists and SSH.COM experts, the ISACA “SSH: Practitioner Considerations” guide is vital best practice from the compliance and audit community.
    Download now