<어떨때 쓰나!>
1. 고객사에 Isilon에 SSH command 기반으로 Provisioning 하는 시스템이 있을 경우
2. Isilon에 SSH 접속이 느린 경우
<확인사항>
그때 보니 SSH Client 에서 3des-cbc 암호화를 사용하였던 상황이고,
SSH 설정의 Ciphers에 해당 항목을 추가하면 되더라.
<EMC ISILON-Ciphers 3des-cbc 추가 방법은...>
* Isilon은 Cluster로 구성되므로 모든 Node에 SSH 설정 변경해야 한다.
cp -v /etc/mcp/templates/sshd_config
/ifs/.ifsvar/sshd_config.old
vi
/etc/mcp/templates/sshd_config à 3des-cbc 삽입
cp -v /etc/mcp/templates/sshd_config
/ifs/.ifsvar/sshd_config.new
isi_for_array "cp -vf /ifs/.ifsvar/sshd_config.new
/etc/mcp/templates/sshd_config"
isi_for_array -s "md5
/etc/mcp/templates/sshd_config"
isi_for_array "killall -HUP sshd"
* 주의사항: ssh_config 이 아니다. sshd_config 을 수정해야 한다.
+++++++++++++++++++++<sshd_config 상세>+++++++++++++++++++++++
# X: ----------------
# X: This file is automatically generated and should not be
# X: edited directly. If you must make changes to the
# X: contents of this file it should be done via the
# X: template file located at /etc/mcp/templates/sshd_config
# X: ----------------
Port 22
HostKey /etc/ssh/ssh_host_key
HostDsaKey /etc/ssh/ssh_host_dsa_key
ServerKeyBits 768
LoginGraceTime 120
KeyRegenerationInterval 3600
PermitRootLogin yes
MaxStartups 10:30:60
IgnoreRhosts yes
StrictModes yes
X11Forwarding yes
X11DisplayOffset 10
PrintMotd yes
KeepAlive yes
SyslogFacility AUTH
LogLevel INFO
#RhostsAuthentication no
RhostsRSAAuthentication no
RSAAuthentication yes
PasswordAuthentication yes
PermitEmptyPasswords no
Subsystem sftp /usr/libexec/sftp-server
Protocol 2
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc
MACs hmac-sha1
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++
