Managing Secure Shell Access in Oracle^® Solaris 11.3

Configuring Secure Shell Task Map

The following task map points to administrative procedures for configuring Secure Shell. Procedures that regular users can perform are in Using Secure Shell.

Task Description For Instructions Run OpenSSH. Switches from the default SunSSH to the latest OpenSSH implementation of Secure Shell. How to Use the OpenSSH Implementation of Secure Shell Run Secure Shell in FIPS 140-2 mode. Enables your Secure Shell implementation to use FIPS 140-2 ciphers from OpenSSL. Example of Running in FIPS 140-2 Mode on an Oracle Solaris 11.3 SRU 5.6 System in Using a FIPS 140-2 Enabled System in Oracle Solaris 11.3 and Creating a Boot Environment With FIPS 140-2 Enabled in Managing Encryption and Certificates in Oracle Solaris 11.3 Configure X.509 certificates for the SunSSH client and server. Enables SunSSH to use certificate-based authentication. How to add a CA cert to Oracle Solaris (https://blogs.oracle.com/solaris/how-to-add-a-ca-cert-to-solaris-v2 ). Configure host-based authentication. Configures host-based authentication on the client and server. How to Set Up Host-Based Authentication for Secure Shell Increase buffer size to handle connection latency. Raises the value of the TCP property recv_buf for high bandwidth, high latency networks. Changing the TCP Receive Buffer Size in Administering TCP/IP Networks, IPMP, and IP Tunnels in Oracle Solaris 11.3 Configure port forwarding. Enables users to use port forwarding. How to Configure Port Forwarding in Secure Shell Configure exceptions to Secure Shell defaults. For users, hosts, groups, and addresses, specifies Secure Shell values that are different from the defaults. How to Create User and Host Exceptions to Secure Shell Defaults Isolate a root environment for sftp transfers. Provides a protected directory for file transfers. How to Create an Isolated Directory for sftp Files