Skip to main content

IBM Software Technical Document

_______________________________________________________________
Hide details for Document Information Document Information

Document Number:384898047
Functional Area: Communications-TCP
Subfunctional Area: Security
Sub-Subfunctional Area: OpenSSH
OS/400 Release:V5R3M0; V5R4M0
Product: PORTABLE UTILITIES FOR I5/OS (5733SC101)
Product Release:N/A


_______________________________________________________________

Document Title
OpenSSH: How to Stop SSH from Creating Thousands of Job Logs

Document Description
When OpenSSH is in use on your system, every new fork in the Unix process has the potential to create a job log.

These job logs usually contain only the message CPF2523 and serve no real purpose.

To prevent this from happening, do the following:
1.Run the WRKJOBD QDFTJOBD command.
2.Copy the default to SSHJOBD, specifying the library of your choice.
3.Run the WRKJOBD SSHJOBD command. Select Option 2 to change, press F9 for more options, and set these values as given in the example that follows.

Message logging:                            
   Level  . . . . . . . . . . . .   0        
   Severity . . . . . . . . . . .   00        
   Text . . . . . . . . . . . . .   *NOLIST  
 Log CL program commands  . . . .   *NO    
4.Press the Enter key to save your changes.
Administrators may need to create additional user profiles for SSH use, specifying the job description SSHJOBD.

Profiles running SSHJOBD job description will not log anything, until an error of Severity 30 or higher is posted.

At this time, there is not a way to start SSH with TCP unless you have the QSH CMD('/QOpenSys/usr/sbin/sshd') command listed in your CL startup program.

If you use a batch job to start SSH, the new SSHJOBD job description must be specified for the Job Description.

To use a job schedule entry, run the following (example) command:

ADDJOBSCDE JOB(OPENSSH) CMD(QSH CMD('/QOpenSys/usr/sbin/sshd')) FRQ(*WEEKLY) SCDDATE(*NONE) SCDDAY(*ALL) SCDTIME('07:00')
JOBD(*LIBL/SSHJOBD) TEXT('Autostart SHH')

Note: Starting with release V6R1 of the operating system, SSHD is part of the TCP servers. You should use the CL commands below to start and end the
SSHD on these machines.

STRTCPSVR SERVER(*SSHD)

ENDTCPSVR SERVER(*SSHD)



__________________________________________________________________
PMR Number:
Related APARs:
Related Public Documents:

    IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.