Restricting user access with the GSP

[Mark Ferraretto]

I have a number of L2000 and L1000 systems that I'm running HP-UX 11.0 on. At the moment the default GSP configuration exists ie: just press Enter at the login and password prompt and you have access to the GSP. I used SO to modify user 1 details and create a 'real' administrator account but after I did this I can still access the GSP with no username or password. How can I force a valid username and password to be entered to get access to the GSP?

Also, I started to create a second user but then changed my mind. It wouldn't let me exit so I had to enter some dummy data in there (user name, login name). How can I reset it so that the data is deleted and it's all left in its original state?

Thanks

Mark

[Iain F. Brown · Accepted solution]

The security aspect on the GSP only applies to telnet sessions to the GSP. I suspect you are using ^B from the console where enter enter will get you in every time.

[Bill McNAMARA_1]

There should be a Security Options available there at the GSP level.

Bill

[Joerg Brand]

Hello Mark,

you can login from the console-port without password as user.
You need a GSP-password to login as Admin or to login as any
user via telnet on the lanconsole-port.

How to reset the passwords ??
There are two different GSP-Firmware versions. Currently, the
version A.01.09 is the actual and to reset the passwords you must
be on the console (Terminal or Webconsole). Type (from the OS):

stty +resetGSP
After that, the GSP will be resetted, the run LED will be off
(don't worry about that, the OS keeps on running) and you have
a few seconds to interrupt the GSP-boot process to reset
the password-list.

Joerg

[Mark Ferraretto]

Hmmm,

Well, I was hoping to protect access to the GSP in case someone broke in and got to the console port either physically or via the web console. Looks like this isn't possible.

Oh well, thanks anyway.