Using remote serial console from iLO

[Mark Parsons]

Hi,

I have just built an rx2800 at HPUX 11.31 but I am having trouble connecting to the remote serial console from the ilo. It does connect but then when you enter Cntrl-Ecf for console write access it bumps the user (Administrator) as usual but then just hangs - I expect to see a root prompt.

Any suggestions?

Mark P.

(Attachments are: ilo.doc - shows the screen details and IMG_2742 shows the current conconfig)

[Dennis Handly]

Perhaps it is HP-UX console that's hung?  Can you login using ssh/rlogin?

[Torsten.]

The reason is shown in your first picture.

The VGA is primary console, hence you cannot see anything on ILO remote.

Set serial to primary and it will work.

[Mark Parsons]

Thanks Torsten - that did work.

However although the vga is now secondary you cant seem to be able to connect to that when the system console is primary. Can you only use one at any given time within conconfig settings?

Also I do have a further issue in that when you do login as root it just drops you out (see ilo3.doc attachment).

Console is also echoed correctly in /etc/securetty:

# cd /etc

# more securetty

console

Access is:

-rw-rw-rw-   1 root       sys              8 Dec 18 12:29 securetty

[Torsten.]

HP-UX can use the primary console only. Maybe other OS can use more, (U)EFI is Intel ...

However, only serial console is forwarded to ILO remote.

You can use VGA later in init 3 as a X terminal.

[Torsten.]

>> Also I do have a further issue in that when you do login as root it just drops you out

Can you ssh to the box?

Maybe a wrong shell configured or anything like this?

Can you logon as another user?

[Mark Parsons]

Yes I can ssh/telnet to the box as "another user" and can successfully then "su - root".

This just seems to happen when directly logging in as root onto the console. It also happens when logging in as "another user" onto the system console but I think this is correct as it should only be root that is allowed to login through the system console.

[Bill Hassell · Accepted solution]

>> # more securetty

>> console

 >>

>>Access is:

 >> -rw-rw-rw-   1 root       sys              8 Dec 18 12:29 securetty

securetty is one of many system security file and should never have world write capability.

Change permissions to 644 or 444.

Perhaps you have umask = 00

This is the (very bad) default for a new system.

umask should be a minimum of 022 in /etc/profile.

Note that securetty is a list of tty devices where root may login.

The word "console" limits root login to *only* the console port (VGA or serial).

As far as a login succeeding, then silently logging out, this is often due to some extra code added to /etc/profile or possibly $HOME/.profile to accomplish what securetty does. To find the code, just add this to the beginning of /etc/profile:

set -x