[Date Prev] [Date Index] [Date Next] [Thread Prev] [Thread Index] [Thread Next]

Re: security

Bryan Stansell bryan@conserver.com
Tue, 18 Apr 2006 08:48:12 -0700 (PDT)


On Tue, Apr 18, 2006 at 11:11:21AM +0200, SDUPUIS@bouyguestelecom.fr wrote:
> But, we wanted to use conserver for security, and only allow people in
> the /etc/conserver.passwd file to access the console.
> 
> So, I need to set the security on in the CS 9000, so a telnet to
> the port 10001 now ask for a passwd before conecting. I also add
> a user with grant to access to the port. That's working ok.
> But I don't know how to tell conserver, that it need to authenticate
> itself, using this login/passwd during the telnet session...
> 
> Any hint on this subject ?

i'd suggest using the 'chat' program in the conserver distribution
(conserver/contrib/chat).  it has a -I flag addition that makes it work
with sockets.  here's an example of someone doing this:

https://www.conserver.com/pipermail/users/2005-October/msg00024.html

there are other ways as well (echo the right stuff or use expect or
other programs), but the chat program works well for this purpose.

> the perle CS 9000 can also use ssh, but I don't know yet what to
> put in conserver.cf to use ssh instead of telnet.
> 
> 
> Last unrelated thing, if someone can give me the break sequence to use
> for the SUN "Stop-A" command... 

looks like the perle folks disable break by default on the cs9000 (page
106 of http://www.perle.com/support_services/documentation_pdfs/5500049.pdf).
so, just do 'set server break on' and then 'save'.  then you should be
able to use the '\z' break signal in conserver (^Ecl1 by default).

Bryan