Configure the SSH Server¶

1. Enable Host-Based Authentication

   Edit:

   TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2]SSHD2_CONFIG.
   

   Change:

   # AllowedAuthentications hostbased,publickey,password
   

   to:

   AllowedAuthentications hostbased
   

2. Install the Client Host Key

   Copy the client host public key to the server's KNOWNHOSTS directory:

   $ COPY/FTP SSH-CLIENT"username password"::-
    TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2]HOSTKEY.PUB -
    TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2.KNOWNHOSTS]-
    SSH-CLIENT_SOME_NETWORK_DOMAIN_NET_SSH-DSS.PUB
   

   Grant world-read access to the copied key:

   $ SET FILE/PROTECTION=W:R -
    TCPIP$SSH_DEVICE:[TCPIP$SSH.SSH2.KNOWNHOSTS]-
    SSH-CLIENT_SOME_NETWORK_DOMAIN_NET_SSH-DSS.PUB
   

3. Configure Trusted Hosts

   Edit the trusted-hosts file:

   TCPIP$SSH_DEVICE:[TCPIP$SSH]SHOSTS.EQUIV
   

   Add the client host name:

   SSH-CLIENT.SOME.NETWORK.DOMAIN.NET