topic Re: Using remote serial console from iLO in Operating System - HP-UX

Using remote serial console from ilo

Mark Parsons — Wed, 17 Dec 2014 13:30:53 GMT

Hi,

I have just built an rx2800 at HPUX 11.31 but I am having trouble connecting to the remote serial console from the ilo. It does connect but then when you enter Cntrl-Ecf for console write access it bumps the user (Administrator) as usual but then just hangs - I expect to see a root prompt.

Any suggestions?

Mark P.

(Attachments are: ilo.doc - shows the screen details and IMG_2742 shows the current conconfig)

Re: Using remote serial console from iLO

Dennis Handly — Wed, 17 Dec 2014 16:27:21 GMT

Perhaps it is HP-UX console that's hung? Can you login using ssh/rlogin?

Re: Using remote serial console from iLO

Torsten. — Thu, 18 Dec 2014 07:44:22 GMT

The reason is shown in your first picture.

The VGA is primary console, hence you cannot see anything on ILO remote.

Set serial to primary and it will work.

Re: Using remote serial console from iLO

Mark Parsons — Thu, 18 Dec 2014 13:34:31 GMT

Thanks Torsten - that did work.

However although the vga is now secondary you cant seem to be able to connect to that when the system console is primary. Can you only use one at any given time within conconfig settings?

Also I do have a further issue in that when you do login as root it just drops you out (see ilo3.doc attachment).

Console is also echoed correctly in /etc/securetty:

# cd /etc

# more securetty

console

Access is:

-rw-rw-rw- 1 root sys 8 Dec 18 12:29 securetty

Re: Using remote serial console from iLO

Torsten. — Thu, 18 Dec 2014 13:46:17 GMT

HP-UX can use the primary console only. Maybe other OS can use more, (U)EFI is Intel ...

However, only serial console is forwarded to ILO remote.

You can use VGA later in init 3 as a X terminal.

Re: Using remote serial console from iLO

Torsten. — Thu, 18 Dec 2014 13:49:16 GMT

>> Also I do have a further issue in that when you do login as root it just drops you out

Can you ssh to the box?

Maybe a wrong shell configured or anything like this?

Can you logon as another user?

Re: Using remote serial console from iLO

Mark Parsons — Thu, 18 Dec 2014 14:01:59 GMT

Yes I can ssh/telnet to the box as "another user" and can successfully then "su - root".

This just seems to happen when directly logging in as root onto the console. It also happens when logging in as "another user" onto the system console but I think this is correct as it should only be root that is allowed to login through the system console.

Re: Using remote serial console from iLO

Bill Hassell — Fri, 19 Dec 2014 01:31:09 GMT

>> # more securetty

>> console

>>Access is:

>> -rw-rw-rw- 1 root sys 8 Dec 18 12:29 securetty

securetty is one of many system security file and should never have world write capability.

Change permissions to 644 or 444.

Perhaps you have umask = 00

This is the (very bad) default for a new system.

umask should be a minimum of 022 in /etc/profile.

Note that securetty is a list of tty devices where root may login.

The word "console" limits root login to *only* the console port (VGA or serial).

As far as a login succeeding, then silently logging out, this is often due to some extra code added to /etc/profile or possibly $HOME/.profile to accomplish what securetty does. To find the code, just add this to the beginning of /etc/profile:

set -x