Notes On Security; Passwords; Login Access To Root In The Partitions - Fujitsu Siemens Computers SX series User Manual

Operating concept of the SX servers

2.4 Notes on security

With an SX business server you can connect multiple systems to each other to form an
operating cluster. Entry-level models in addition to the operating system BS2000/OSD now
have the carrier system X2000 available as an additional system. This means that for
administration and operating purposes you will require access to a number of different
logins. The access to these logins (and in particular to the root login) has security-related
implications. The sections below provide some notes on access control.

2.4.1 Passwords

The business servers in the SX series are shipped with standard passwords for access to
the X2000 carrier system, Solaris (in the case of Solaris partitions) and the SMC.
i
When assigning passwords, we recommend that you follow these general rules:
– Passwords must be changed at regular intervals.
– Passwords can contain characters, figures and special characters.
– Passwords must not be stored on the system or on the remote workstations.

2.4.2 Login access to root in the partitions

In the SX business server as it is supplied, root access to the partitions is possible only via
the console, either on the SMC (see
page 86) or, for entry-level models, on the local console.
In the system as supplied, a remote login to the root login via a network is therefore not
possible.
This is achieved by setting CONSOLE=/dev/console/ in the file /etc/default/login.
i
Generally speaking, it is not necessary to possess login access to the root login in order to
administer partition systems (of, for example, entry-level models) because PRIMEPOWER
ServerView is provided for this purpose. This is particularly true in the case of BS2000
systems.
U41272-J-Z385-3-76
These passwords must be changed by the customer, particularly for the root logins
on the corresponding systems!
This entry must not be changed into a comment!
section "Consoles of the partitions with RC2000" on
Notes on security
17