SCS1620 Product Manual
Lightwave Communications
Page
22
www.lightwavecom.com
5.1.2 Logging
Out
To log out from a session, enter the command
logout
logout
logout
logout
. If logging out from a
network session, the Console Server will disconnect the telnet session. If logging
out from a direct serial session, the SCS1620 returns to the
login:
login:
login:
login:
prompt.
When you are done with any programming changes, you should always log out.
5.2 Security
and
Passwords
The SCS1620 uses Linux / UNIX commands to administer the system. The
System Administrator (
sysadmin
) and the Users access the system using a shell
interface, which limits what the user or sysadmin will affect in the operating
system. Those that are familiar with Linux realize that there are numerous
commands and files that are not discussed in this manual (intentionally). Some of
the SCS1620's options (e.g., ssh, LDAP) interact with operating system directly.
The shell is designed to offer the appropriate level of administration while
maintaining the integrity of the system. This can be defeated if the sysadmin
does not protect the system by changing the passwords upon installation. The
system's default values are configured to minimize security issues, however, as
features are turned on by the sysadmin, more potential security holes open up.
The sysadmin programming level is as close to 'root' as is required to administer
the SCS1620, but it is not the most-senior root level. The root level is
intentionally removed from the shell, however, it exists in the system and its
password must be changed to protect from unauthorized access or changes.
Note:
There are no 'back door' passwords. You can lock the system down and
prevent programming access if you misplace your passwords. If you forgot the
passwords you entered, the system FLASH must be replaced.
One interesting, relevant article (of many) on Linux Security can be found at:
http://linux.com/interact/newsitem.phtml?sid=82&aid=6326
5.2.1 Change the sysadmin password
The System Administrator must change the password for the
sysadmin
level
before it is connected to a network or accessible from 'the outside world'.
5.2.2 Change the root password
The System Administrator must change the password for the root level. Although
root access is not required by the sysadmin or the users, it is accessible by the
sysadmin and can be accessed using ssh.
This is especially important if ssh is enabled since ssh can offer the ability for
root-level access by a remote system (depending on sysadmin settings).
