Server Configuration¶

1. Create a copy of the client host public key so that the server's host key is not overwritten.

   CLIENT$ COPY SSH_HOST_RSA_KEY.PUB TESTPUBKEY.PUB
   

   Transfer the file to the server using SFTP.

   $ SFTP server

   sftp> CD /SSH$ROOT/ETC
   sftp> PUT TESTPUBKEY.PUB
   sftp> EXIT
   

2. Edit SSH$ROOT:[ETC]SSHD_CONFIG and enable the following settings:

   UseDNS yes
   HostbasedAuthentication yes
   

   Create or update SSH_KNOWN_HOSTS using the transferred host key:

   $ APPEND TESTPUBKEY.PUB SSH_KNOWN_HOSTS.
   

   or

   $ RENAME TESTPUBKEY.PUB SSH_KNOWN_HOSTS.
   

   Edit SSH_KNOWN_HOSTS and prepend the client's FQDN and IP address:

   $ EDIT SSH_KNOWN_HOSTS
   client.my.domain.com,10.10.118.7 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAB...