Installation and Migration Guide

|Configuring none for AIX remote command authorization

|After you install the secure remote command software of your choice on the |control workstation and enable the restricted root access and secure remote |command process options, when setting your security configuration within each |SP system partition, a choice of none is offered for AIX remote |command authorization. If you choose none, the PSSP system |management software does not generate any root entries in the |.klogin, .k5login, or .rhosts |files on the nodes in the partition. To be able to set AIX |authorization for remote commands to none in any partition, PSSP |3.4 must be installed on all nodes in that partition.

|Steps to configure none for AIX remote command |authorization: |

1. |Use the spsetauth command to set none for a particular |partition. Run the spsetauth command for each partition as |needed. This command updates the root authorization files on the |control workstation only and puts the setting in the SDR. For |example:

   |spsetauth -d -p partition_name none

2. |Update the root authorization files on the nodes to remove any |PSSP-generated entries. For example:

   |dsh -avG /usr/lpp/ssp/bin/updauthfiles

   |