8 SPARC Enterprise Mx000 Servers Administration Guide • August 2009
Logging in to the System
There are two entities that can be logged in to on the system, a Service Processor and
a Solaris domain.
You initially log in to the Service Processor using a serial connection from a terminal
device. A terminal device can be an ASCII terminal, a workstation, or a PC. For
details on serial port connections, see the Installation Guide for your server or the
SPARC Enterprise M3000/M4000/M5000/M8000/M9000 Servers XSCF User’s Guide.
A unique login account with the user name of default exists on the Service
Processor. This account is unique in the following ways:
■ It can never be logged in to using the standard UNIX user name and password
authentication or SSH public key authentication.
■ It can only be logged in to using a procedure that requires physical access to the
system.
■ Its privileges are fixed to be useradm and platadm; you cannot change these
privileges.
■ It cannot be deleted, it has no password, and no password can be set for it.
After initial configuration, you can log in to the Service Processor using a serial
connection or an Ethernet connection. You can redirect the XSCF console to a domain
and get a Solaris console. You can also log in to a domain directly using an Ethernet
connection to access the Solaris OS.
When a user logs in, the user establishes a session. Authentication and user
privileges are valid only for that session. When the user logs out, that session ends.
To log back in, the user must be authenticated once again, and will have the
privileges in effect during the new session. See “Privileges” on page 10 for
information on privileges.
Lockout Period Between Login Attempts
After multiple XSCF login failures, no further login attempts are allowed for a
certain amount of time. To set the lockout period, use the setloginlockout(8)
command. To view the lockout period, use the showloginlockout(8) command.
For more information, see the setloginlockout(8) and showloginlockout(8)
man pages.
Note – The ability to specify and view the lockout period was added in a recent
XCP update. Please see the Product Notes for the firmware release running on your
server (no earlier than the XCP 1080 release) for possible restrictions.
To Next Page
Loading...
Need help?
General
