Disable login prompts on serial ports - Cyclade & terminal connection / Solaris 10

[underh20.s...@gmail.com]

We've been asked to disable login prompt on serial ports at our
Solaris 10 servers by issuing the following commands :

# pmadm -d -p zsmon -s ttya
# pmadm -d -p zsmon -s ttyb

Couple questions arise. First question is that we use Cyclade as
remote terminal connection via serial port at these servers. Will the
above commands affect these existing Cyclade connection to the
servers ? Second question is that we have a Sun M5000 server with 2
hardware partitions/domains and an internal terminal server (eXtended
System Control Facility).
We access and control each of the domains via XSCF. Will the above
commands affect the XSCF connection to the servers ?

Thanks, Bill

<<Current serial ports setup>>

# pmadm -l -p zsmon
PMTAG PMTYPE SVCTAG FLGS ID
<PMSPECIFIC>
zsmon ttymon ttya u root /dev/term/a
I - /usr/bin/login - 9600 ldterm,ttcompat ttya login: - tvi925 y #
zsmon ttymon ttyb u root /dev/term/b
I - /usr/bin/login - 9600 ldterm,ttcompat ttyb login: - tvi925 y #

[Helmut Kreft]

["Followup-To:" header set to comp.unix.admin.]

On Mon, 20 Apr 2009 11:18:24 -0700 (PDT), underh20.s...@gmail.com wrote:
> We've been asked to disable login prompt on serial ports at our
> Solaris 10 servers by issuing the following commands :
>
> # pmadm -d -p zsmon -s ttya
> # pmadm -d -p zsmon -s ttyb
>
> Couple questions arise. First question is that we use Cyclade as
> remote terminal connection via serial port at these servers. Will the
> above commands affect these existing Cyclade connection to the
> servers ? Second question is that we have a Sun M5000 server with 2

I assume, these machines have no keyboard/monitor attached and you
use the cyclades to reach the console? Then IIRC the above commands
will have no impact whatsoever on your ability to log in via the
console.

That beeing said - I am not quite shure what is there to be achieved
by running the above commands. I assume someone fears the possibility
unauthorized devices get attached to the machine?

> hardware partitions/domains and an internal terminal server (eXtended
> System Control Facility).
> We access and control each of the domains via XSCF. Will the above
> commands affect the XSCF connection to the servers ?
>

I don't know about this one, but I'd guess it will be unaffected also.
Just try the above commands in both scenarios _if_ you have an alternate
path to the machine like SSH for example. Test and reenable if things
stop working. :)

Helmut

--
In order to succeed, it helps to know the likely ways to fail.
M. Minsky

[Darren Dunham]

In comp.unix.solaris underh20.s...@gmail.com wrote:
> We've been asked to disable login prompt on serial ports at our
> Solaris 10 servers by issuing the following commands :
>
> # pmadm -d -p zsmon -s ttya
> # pmadm -d -p zsmon -s ttyb

Were they enabled in the first place? They're not by default. A zsmon
is configured by default, but it does *not* handle logins.

> Couple questions arise. First question is that we use Cyclade as
> remote terminal connection via serial port at these servers. Will the
> above commands affect these existing Cyclade connection to the
> servers ?

No. That's the console and it is not managed by zsmon. It's managed by
a direct ttymon on the console (which may be the same physical port, but
is a separate device from ttya/ttyb).

> Second question is that we have a Sun M5000 server with 2
> hardware partitions/domains and an internal terminal server (eXtended
> System Control Facility).
> We access and control each of the domains via XSCF. Will the above
> commands affect the XSCF connection to the servers ?

In all likliehood, the above commands did nothing other than make it
more difficult for programs to use the serial port for outbound
connections. It doesn't affect anything other than in the domain you've
run it in.

> <<Current serial ports setup>>
>
> # pmadm -l -p zsmon
> PMTAG PMTYPE SVCTAG FLGS ID
> <PMSPECIFIC>
> zsmon ttymon ttya u root /dev/term/a
> I - /usr/bin/login - 9600 ldterm,ttcompat ttya login: - tvi925 y #
> zsmon ttymon ttyb u root /dev/term/b
> I - /usr/bin/login - 9600 ldterm,ttcompat ttyb login: - tvi925 y #

And in fact that confirms it. The 'I' indicates that these ports are
running in (I)nitialize only mode, so no login is being served.

--
Darren

[Martha Starkey]

On 04/20/09 14:18, underh20.s...@gmail.com wrote:
> We've been asked to disable login prompt on serial ports at our
> Solaris 10 servers by issuing the following commands :
>
> # pmadm -d -p zsmon -s ttya
> # pmadm -d -p zsmon -s ttyb

if there is ever any doubt that that these are causing a serial port
comm problems, no matter if they are initialized, not initialized or
whatever, just remove them:

pmadm -r -p zsmon -s ttyX

they can be replaced with this long command:

Hardwired terminal:

#pmadm -a -p zsmon -s tty(a or b) -i root -v `ttyadm -V` -fu -m "`ttyadm
-S y -d /dev/term/(a or b) -s /usr/bin/login -l 9600 -m
ldterm,ttcompat`" -y "Terminal hardwired"

Bidirectional modem:

#pmadm -a -p zsmon -s tty(a or b) -i root -v `ttyadm -V` -fu -m "`ttyadm
-b -S n -d /dev/term/(a or b) -s /usr/bin/login -l 9600 -m
ldterm,ttcompat`" -y "bidirectional modem"

You can also use admintool (for older Solaris versions) or SMC for S10.

The output below indicates those were probably the default port monitors
for hardwired terminals that get installed with Solaris 10.