Owner's Manual

94 Security
Troubleshooting SSH
To trouble shoot SSH configuration issues and host keys debug output can be helpful. Turn on
log4j debug for
com.dorado.mediation.cli and you should see debug that looks something
like the following (d:\Dell is $OWARE_USER_ROOT in the following):
loading SSH config from 'd:\Dell\owareapps\ezmediation\lib\ssh_config'
loading host '*'
adding property 'compression.s2c' = 'none'
adding property 'compression.c2s' = 'none'
adding property 'StrictHostKeyChecking' = 'no'
Loaded SSH Config:
Host '*'
StrictHostKeyChecking 'no'
compression.s2c 'none'
compression.c2s 'none'
Host keys in d:\Dell\.ssh\known_hosts
-->192.168.1.118 ssh-rsa 90:b7:2a:e0:64:30:6a:74:9c:e8:7b:75:61:48:52:7b
-->194.78.112.59 ssh-rsa 54:ca:2b:41:83:41:9b:d8:df:b9:a3:59:73:b2:28:0c
SSH HostKey Errors
Example error messages:
• A failed Direct Access Cut-Through attempt to a device that did not have its host key in the
known_hosts file displays
ERROR - reject Hostkey: [host IP address]
• The audit trail output for a resync operation to a device that did not have its host key in the
known_hosts file displays SSH HostKey was rejected in the audit messages.
RADIUS Authentication
If you want to use RADIUS authentication for this application’s clients, you must create a RADIUS
user matching the login in the application (and assign that user the correct groups and functional
permissions in the application).
The property file that needs to change is on the application server(s) in
oware\jboss-<version number>\server\oware\conf\login-config.xml.