How to setup SSH (+ passwordless ssh) for a Netapp filer

It is a 3 step process listed below:

1) Setup secureadmin from filer
2) Enable ssh
3) Copy the ssh keys to the filer for the desired hosts.

In following example, I wanted to setup ssh for remote-mgr server (which is a Sun box) and filer01 is a Netapp filer.

This article assumes that you already know how ssh and passwordless ssh works. This just gives the outlines :)

Once again, if you are not sure what you are doing, consult NetApp support. Doing this process wrong can disable all the ssh logins!!! So, be careful.

[remote-mgr::root:/root]# ssh 192.168.15.200
ssh: connect to host 192.168.15.200 port 22: Connection refused

[remote-mgr::root:/root]# telnet 192.168.15.200
Trying 192.168.15.200...
Connected to 192.168.15.200.
Escape character is '^]'.

Password:
filer01>
filer01> secureadmin status
ssh2    - inactive
ssh1    - inactive
ssl     - inactive

filer01> secureadmin setup ssh
SSH Setup
---------
Determining if SSH Setup has already been done before...no

SSH server supports both ssh1.x and ssh2.0 protocols.

SSH server needs two RSA keys to support ssh1.x protocol. The host key is
generated and saved to file /etc/sshd/ssh_host_key during setup. The server
key is re-generated every hour when SSH server is running.

SSH server needs a RSA host key and a DSA host key to support ssh2.0 protocol.
The host keys are generated and saved to /etc/sshd/ssh_host_rsa_key and
/etc/sshd/ssh_host_dsa_key files respectively during setup.

SSH Setup will now ask you for the sizes of the host and server keys.
 For ssh1.0 protocol, key sizes must be between 384 and 2048 bits.
 For ssh2.0 protocol, key sizes must be between 768 and 2048 bits.
 The size of the host and server keys must differ by at least 128 bits.

Please enter the size of host key for ssh1.x protocol [768] :
Please enter the size of server key for ssh1.x protocol [512] :
Please enter the size of host keys for ssh2.0 protocol [768] :

You have specified these parameters:
        host key size = 768 bits
        server key size = 512 bits
        host key size for ssh2.0 protocol = 768 bits
Is this correct? [yes]

Setup will now generate the host keys in the background. It will take a
few minutes. After Setup is finished you can start SSH server with
command 'secureadmin enable ssh'. A syslog message will be generated
when Setup is complete.

Tue Aug 18 21:52:37 GMT [rc:info]: SSH Setup: SSH Setup is done. Host keys are stored in /etc/sshd/ssh_host_key, /etc/sshd/ssh_host_rsa_key and /etc/sshd/ssh_host_dsa_key.
filer01>
filer01> Connection to 192.168.15.200 closed by foreign host.

[remote-mgr::root:/root]# mkdir /tmp/filer01
[remote-mgr::root:/root]# mount 192.168.15.200:/vol/vol0 /tmp/filer01

[remote-mgr::root:/root]# cd /tmp/filer01/etc/sshd
[remote-mgr::root:/tmp/filer01/etc/sshd]# ls -l
total 48
-rw-------   1 root     root         534 Aug 19 05:52 ssh_host_dsa_key
-rw-r--r--   1 root     root         470 Aug 19 05:52 ssh_host_dsa_key.pub
-rw-------   1 root     root         411 Aug 19 05:52 ssh_host_key
-rw-r--r--   1 root     root         249 Aug 19 05:52 ssh_host_key.pub
-rw-------   1 root     root         688 Aug 19 05:52 ssh_host_rsa_key
-rw-r--r--   1 root     root         174 Aug 19 05:52 ssh_host_rsa_key.pub

[remote-mgr::root:/tmp/filer01/etc/sshd]# ssh 192.168.15.200 uptime
ssh: connect to host 192.168.15.200 port 22: Connection refused

[remote-mgr::root:/tmp/filer01/etc/sshd]# rsh 192.168.15.200 secureadmin status
ssh2    - inactive
ssh1    - inactive
ssl     - inactive

[remote-mgr::root:/tmp/filer01/etc/sshd]# rsh 192.168.15.200 secureadmin enable ssh

[remote-mgr::root:/tmp/filer01/etc/sshd]# ssh 192.168.15.200 uptime
The authenticity of host '192.168.15.200 (192.168.15.200)' can't be established.
RSA key fingerprint is 9b:aa:c9:0e:92:ed:f7:98:60:9f:9d:0e:b1:65:96:ed.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.15.200' (RSA) to the list of known hosts.
root@192.168.15.200's password:
  9:57pm up 36 mins, 12 NFS ops, 0 CIFS ops, 0 HTTP ops, 0 DAFS ops, 0 FCP ops, 0 iSCSI ops

[remote-mgr::root:/tmp/filer01/etc/sshd]# mkdir -p root/.ssh
[remote-mgr::root:/tmp/filer01/etc/sshd]# mkdir .ssh
[remote-mgr::root:/tmp/filer01/etc/sshd]# ls -l
total 56
drwxr-xr-x   2 root     root        4096 Aug 19 05:58 root
-rw-------   1 root     root         534 Aug 19 05:52 ssh_host_dsa_key
-rw-r--r--   1 root     root         470 Aug 19 05:52 ssh_host_dsa_key.pub
-rw-------   1 root     root         411 Aug 19 05:52 ssh_host_key
-rw-r--r--   1 root     root         249 Aug 19 05:52 ssh_host_key.pub
-rw-------   1 root     root         688 Aug 19 05:52 ssh_host_rsa_key
-rw-r--r--   1 root     root         174 Aug 19 05:52 ssh_host_rsa_key.pub
[remote-mgr::root:/tmp/filer01/etc/sshd]# cd root/
[remote-mgr::root:/tmp/filer01/etc/sshd/root]# ls -la
total 24
drwxr-xr-x   3 root     root        4096 Aug 19 05:58 .
drwxr-xr-x   3 root     root        4096 Aug 19 05:58 ..
drwxr-xr-x   2 root     root        4096 Aug 19 05:58 .ssh
[remote-mgr::root:/tmp/filer01/etc/sshd/root]#
[remote-mgr::root:/tmp/filer01/etc/sshd/root]# cd .ssh/
[remote-mgr::root:/tmp/filer01/etc/sshd/root/.ssh]# ls -la
total 16
drwxr-xr-x   2 root     root        4096 Aug 19 05:58 .
drwxr-xr-x   3 root     root        4096 Aug 19 05:58 ..

[remote-mgr::root:/tmp/filer01/etc/sshd/root/.ssh]# cat /root/.ssh/id_dsa.pub >> /tmp/filer01/etc/sshd/root/.ssh/authorized_keys2

[remote-mgr::root:/tmp/filer01/etc/sshd/root/.ssh]# ssh 192.168.15.200 uptime
 10:00pm up 39 mins, 58 NFS ops, 0 CIFS ops, 0 HTTP ops, 0 DAFS ops, 0 FCP ops, 0 iSCSI ops

[remote-mgr::root:/tmp/filer01/etc/sshd/root/.ssh]# ssh 192.168.15.200
filer01>
filer01>
filer01>
filer01> Connection to 192.168.15.200 closed by remote host.
Connection to 192.168.15.200 closed.