Registry changes needed for Import Poller process (nhiRpImport) to establish Secure FTP communication with OpenSSH software (Cygwin) in eHealth 6.2.2 and above.

Products

• CA eHealth

Issue/Introduction

Description:

After upgrading to eHealth 6.2.2, no data are being imported from the Remote Poller(s) sites.

There is no error showing up during or after the upgrade and the Remote Pollers seems to be working fine.

However the system.log has the following communication error messages:

Warning nhiRpImport Pgm nhiRpImport:

Unable to establish ftp connection with host 'nnnnn' - check host name,

login, and password.

Solution:

eHealth 6.2.2 introduces a new version of the Import Poller process (nhiRpImport) which requires an update to the OpenSSH configuration of the Windows' Remote Pollers in the eHealth Remote Poller environment.

This requires a Registry change for the openSSH software (Cygwin) to allow proper communication with the remote sites using Secure FTP.

The steps to be followed are those outlined in the eHealth 6.3.1 Remote Poller User Guide.

From eHealth 6.3.1 Remote Poller User Guide on page 20:

Configure a Windows Remote Site for OpenSSH Secure FTP

Use this procedure to set specific values needed for interaction with CA eHealth and to create a pointer from the SSH installation to CA eHealth.

To configure a Windows remote site for OpenSSH Secure FTP

1. Edit the file, C:\OpenSSH\etc\sshd_config, to make the following changes:
   
   
   1. Change the value of StrictModes to no.
      
      
   2. Change the value of RSAAuthentication to yes.
      
      
   3. Uncomment PubkeyAuthentication yes .
      
      
   4. Save the file.
      
      
2. Configure an alias pointing to the CA eHealth home directory:
   
   
   1. Start the regedit utility and navigate to the
      
      HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2.
      
      
   2. Create a new key and specify /NH_HOME as the name.
      
      
   3. Create the DWORD value with the name flags in the new key.
      
      
   4. Create a string value with the name native in the new key.
      
      
   5. Modify flags and set the hexadecimal value "a".
      
      
   6. Modify native and specify the CA eHealth directory as the home directory (for example, C:\ehealth6.3).
      
      
   7. Exit the regedit utility.
      
      
3. Go to Administrative Tools, Services and change the value of Log on as for OpenSSH Service from Local System account to nhuser. Specify the domain if you are using a domain user. For example:
   
   domainname\nhuser
   
   
4. Restart the OpenSSH service.
   
   Note: If you receive an error, remove the file,
   
   C:\OpenSSH\var\log\OpenSSHd.log, and try restarting the service again.
   
   Note: If using OpenSSH v3.8p1, additional steps are required - as per page 31 of eHealth 6.3.1 Remote Poller User Guide :

Additional Configuration for OpenSSH v3.8p1

To complete the OpenSSH v3.8p1 configuration

1. Edit the following fields in the file, c:\OpenSSH\etc\sshd_config.
   
   StrictModes no
   RSAAuthentication yes
   PubkeyAuthentication yes
   
   
2. Change the Log on as setting at OpenSSH Server service from Local System account to nhuser.
   
   If you receive an error during this step, remove the log file,
   c:\OpenSSH\var\log\OpenSSHd.log and try again.
   
   
3. Create an NH_HOME mount point using the following steps, or skip to step 4 to create a soft link:
   
   
   1. Start the regedit utility and navigate to the
      
      HKEY_LOCAL_MACHINE\SOFTWARE\Cygnus Solutions\Cygwin\mounts v2.
      
      
   2. Create a new key and specify /NH_HOME as the name.
      
      
   3. Create the DWORD value with the name flags in the new key.
      
      
   4. Create a string value with the name native in the new key.
      
      
   5. Modify flags and set the hexadecimal value "a".
      
      
   6. Modify native and specify the CA eHealth directory as the home directory (for example, C:\ehealth6.3).
      
      
   7. Exit the regedit utility.
      
      
4. (Optional) Create a soft link named NH_HOME, instead of creating the mount point, using the following steps:
   
   
   1. Access a command prompt and navigate to the directory, C:\cygwin\bin.
      
      
   2. Run the following command:
      
      ln s /cygdrive/c/eHealth/ /NH_HOME
      
      In this command, C:/eHealth is the CA eHealth home directory.
      
      
5. Go to Administrative Tools, Services and change the value of Log on as for OpenSSH Service from Local System account to nhuser.
   
   Specify the domain if you are using a domain user, for example,
   
   domainname\nhuser.
   
   
6. Restart the OpenSSH service.
   
   Note: If you receive an error, remove the file,
   
   C:\OpenSSH\var\log\OpenSSHd.log, and restart the service.

Environment

Release:
Component: EHIM