HP-UX System Administrator's Guide: Security Management HP-UX 11i v3 (B3921-90020, September 2010)

• Port forwarding
The redirection of TCP/IP connections between a client and a remote host (and
back) is referred to as port forwarding or SSH tunneling. HP-UX Secure Shell
supports port forwarding. For example, ftp traffic between a client and a server
(or email traffic between an email client and a POP/IMAP server) can be redirected
using port forwarding. Instead of the client directly communicating with its server,
the traffic can be redirected to an sshd server over a secure channel, and the sshd
server can then forward the traffic to a designated port on the real server machine.
• Integration with underlying HP-UX security features.
The HP-UX Secure Shell product is integrated with important HP-UX security
features. For more information, see Section 4.6.7.
4.6.2 Software Components of HP-UX Secure Shell
HP-UX Secure Shell software consists of a set of client and server components. See
Table 4-2.
Table 4-2 Software Components of HP-UX Secure Shell
Equivalent
non-secure
component(s)
LocationDescriptionComponent
remsh, telnet,
rlogin
ClientSecure Shell client is a secure replacement for
telnet and remsh; it is most similar to
remsh with security features
ssh
remsh, telnet,
rlogin
Client
Symbolic link to sshslogin
rcp
Client and
server
Secure copy client and secure copy server
scp
ftp
Client
Secure ftp clientsftp
remshd, telnetd,
rlogind
ServerSecure shell daemon
sshd
ftpd
Server
Secure ftp daemonsftp-server
Not applicableServerRandom number generator, which is used
when sshd is not able to find /dev/random
or /dev/urandom on the server. HP-UX is
shipped with a kernel-resident random
number generator, rng. If rng is
deconfigured, sshd uses prngd.
ssh-rand-helper
rhosts file
mechanism
Client and
server
Tool for "automatic" key-based login from
client to server
ssh-agent
4.6 Securing Remote Sessions Using HP-UX Secure Shell (SSH) 77