Ftp Access To Root; User Roles For Sx Servers With Smc - Fujitsu Siemens Computers SX series User Manual

Notes on security
However, should it become necessary to work under the root login then it is advisable to set
up user-specific logins under which login can be performed. Only then should the user
acquire root permissions by means of the su command.
User-specific IDs can be set up in the Users application of PRIMEPOWER ServerView in
the Users tab by clicking on the Users button and selecting the Create function (for details
please see the
The advantage of this procedure is that root requests are logged in the sulog file. This
ensures that there is a record of when which users have acquired root permissions.

2.4.3 FTP access to root

This is similar to login access. File transfer with root permissions also calls for certain
security-related considerations. For this reason, FTP access to root is not possible by
default. This is achieved by setting root in the file /etc/ftpusers.
i
It is better to start by performing the transfer under a user-specific login. As described
above, the files can then be copied to the target location by using the su command with the
appropriate authorizations to request the root permissions.

2.4.4 User roles for SX servers with SMC

Depending on the extent to which it is necessary to separate Solaris and BS2000 adminis-
tration and operation, there are a number of different ways of performing these tasks.
A number of related scenarios are presented below:
Joint administration of the server, the configuration and operation by system adminis-
tration
In the simplest case all the server administration tasks are performed by a restricted
user group. In this case, all the members of this user group are able to access the SMC
from where they perform all the necessary tasks.
The SMC is not accessed via the root login but under one or more server administrator
logins belonging to the cladmin group (see
page
18
section "Administration of PRIMEPOWER ServerView" on page
This entry must not be changed into a comment!
44).
Operating concept of the SX servers
section "User groups and logins" on
53).
U41272-J-Z385-3-76