[ ISILON ] SSH Ciphers: 3des-cbc 설정 방법

<어떨때 쓰나!>

1. 고객사에 Isilon에 SSH command 기반으로 Provisioning 하는 시스템이 있을 경우

2. Isilon에 SSH 접속이 느린 경우

<확인사항>

그때 보니 SSH Client 에서 3des-cbc 암호화를 사용하였던 상황이고,

SSH 설정의 Ciphers에 해당 항목을 추가하면 되더라.

<EMC ISILON-Ciphers 3des-cbc 추가 방법은...>

* Isilon은 Cluster로 구성되므로 모든 Node에 SSH 설정 변경해야 한다. 

cp -v /etc/mcp/templates/sshd_config /ifs/.ifsvar/sshd_config.old

vi /etc/mcp/templates/sshd_config       à 3des-cbc 삽입

cp -v /etc/mcp/templates/sshd_config /ifs/.ifsvar/sshd_config.new

isi_for_array "cp -vf /ifs/.ifsvar/sshd_config.new /etc/mcp/templates/sshd_config"

isi_for_array -s "md5 /etc/mcp/templates/sshd_config"

isi_for_array "killall -HUP sshd"

* 주의사항: ssh_config 이 아니다. sshd_config 을 수정해야 한다.

+++++++++++++++++++++<sshd_config 상세>+++++++++++++++++++++++

# X: ----------------

# X: This file is automatically generated and should not be

# X: edited directly.  If you must make changes to the

# X: contents of this file it should be done via the

# X: template file located at /etc/mcp/templates/sshd_config

# X: ----------------

Port 22

HostKey /etc/ssh/ssh_host_key

HostDsaKey /etc/ssh/ssh_host_dsa_key

ServerKeyBits 768

LoginGraceTime 120

KeyRegenerationInterval 3600

PermitRootLogin yes

MaxStartups 10:30:60

IgnoreRhosts yes

StrictModes yes

X11Forwarding yes

X11DisplayOffset 10

PrintMotd yes

KeepAlive yes

SyslogFacility AUTH

LogLevel INFO

#RhostsAuthentication no

RhostsRSAAuthentication no

RSAAuthentication yes

PasswordAuthentication yes

PermitEmptyPasswords no

Subsystem sftp /usr/libexec/sftp-server

Protocol 2

Ciphers aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc

MACs hmac-sha1

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++