I was wondering if anyone had experimented with using OpenSSH on a
d3/NT system in a way where the ssh session was redirected/spawned into
a d3 telnet? I know I can use putty to create a tunnel to get there
but I'm looking to idiot proof (as much as possible) this for users.
Ideally, all that would be needed is for the user to be walked through
setting up an Accuterm ssh session to the server. The putty setup is
probably beyond their reach. My networking skills aren't quite enough
to get it there and I'd appreciate a bump in the right direction.

You can use Accuterm for both.

Open a Secure SHell session first to authenticate, then open a telnet
session to the D3 server.
Save the settings in an Accuterm atcf extension, then you can automate a
shortcut for each.
The user just has to click on the shortcut then.
Check the Accuterm forum: http://www.asent.com/forum/default.asp.
Pete could help you come up with one script or shortcut.

cheseroo wrote:

Why not just create an encrypted Windows VPN connection point-point &
use plain telnet through that ?!? What are you trying to achieve using
SSH (apart from breaking ground, and a few body parts along the way?)

You can run putty from the DOS command line (or a .bat proggie) and
tell it to load a particular saved session. Check here:

http://www.tartarus.org/~simon/putty...html#faq-howto

Somewhere in that site is an example of how to load/unload putty
sessions from the command line (.bat actually) using regedit. This
would help idiot proof the process.

It solves a 2-part problem. The owners/administrators of our customer
sites want HIPAA compliance which means encryption. The network people
who work for those people say they will allow unencrypted telnet over
their dead bodies. They become even more flexible when we mention a
VPN into THEIR network. *nix solves the problem but now we are mixing
their network and they want NT. So the OpenSSH gets us in the back
door but now we have a very complicated login process that the users
invariably screw up.

I like this idea as a 2nd alternative. I was hoping there was a
../bash_profile type file in the OpenSSH serve that I could insert a
command like `telnet localhost`, When somebody ssh'd to the server and
logged in it would spawn a d3 session.

cheseroo wrote:
Similar but different... I have sites with an old PC running RH that
remote users ssh into.. the .bash_profile does an rlogin to the D3 host,
and the .bash_profile on that system starts a D3 session. Thus the
remote users only logon once, and they don't even know that they are
going through an intermediate system (response time can get a bit
spongy, though). Also, the "old PC running RH" is very stripped down,
with no data on it and no other services... so if it gets hacked or
DOS'd, not a big deal to reload & reconfigure.

Scott Ballinger
Pareto Corporation
Edmonds WA USA
206 713 6006

Scott, thanks for the reply. Yep, I know we can get it done on RH and
do the exact same thing here on our internal machines. You can even
narrow it down further where if someone is coming from a specific ip or
subnet that they they skip the OS login and go straight to a d3 login
if you wanted to. I'm still stuck in that we have an RH adverse
customer who requires a cheap encrypted telnet (i.e. ssh) for their
d3/NT server. A vpn would do it but their security consultant is
nixing that. We can argue till we're blue in the face but these people
have their mind made up. I guess I'm going to need to install the full
cygwin and try to figure it out.