[comp.os.vms] Changing DECserver passwords

rdn@chinet.UUCP (Richard Nichols) (05/06/88)

My company's VAX manager *suddenly* left the company, so we are in a bit
of a security panic.  All of the obvious security problems have been addressed,
but we want to be thorough.  Is there any way to download new Priv. and Maint.
passwords to all of our DECSERVER 200's from a host VAX?  Having to log into
a port on each is going to be a very time consuming method.  (It also
is potentially error prone.)

Any suggestions are welcome.  (And needed as soon as possible!)

Richard D. Nichols
(...!ihnp4!chinet!rdn  or  rdn@chinet.UUCP  if you prefer)

rrk@byuvax.bitnet (05/07/88)

You can do it all from one terminal.  You still have to do it separately
(to the best of my knowledge) on each DECServer:

$ NCP:=$NCP
$ NCP CONNECT NODE SERV0

will connect you to the console of DECServer node SERV0 (as known to DECNET
for the purpose of automatic line service, I believe).

You may have to type a password at this point.  Then SET PRIV with the proper
password.  Then you can:

SET PORT ALL PASSWORD XZXZXZ

or do any other operation on all ports of the server at the same time.


Actually:

DEFINE PORT ALL PASSWORD BVBVBV

is what you want to put it in the permanent database.

(ctrl-D returns you to your terminal session)

                                AMMON::RAY

ANK@CUNYVMS1.BITNET (ANIL KHULLAR) (05/24/88)

There is another way that DECSERVER passwords can be changed. This
way is recommended only if the SERVER manager has forgotten the old password,
or is on leave (specially with summer coming near...). This is by
setting the Software switch on each server (noted as S1 in the manual diagram)

This then resets the password to "SYSTEM". But this may wipe out the sofware
configuration for the DECSERVER to original state. Maybe there is another way
equiv to UAF, where you modify the password without old password; but that is
not given in the manual.

                                                Anil Khullar
                                        {Ph.D. Prog in Psychology
                                         C.U.N.Y. Grad. Center.
                                        33 W 42 St. Box 295,
                                         New York NY 10036      }

BITNET:ank@cunyvms1
INTERNET:ank%cunyvms1.BITNET@cunyvm.cuny.edu
        :ankgc@cunyvm.cuny.edu
==========================================================================

CHIAM@OUACCVMB.BITNET (05/27/88)

Date : 05/27/88 09:35:49 EDT FRIDAY
To : INFO-VAX
From : Chiam
Bitnet Address : CHIAM at OUACCVMB

In article that reads "There is another way that DECserver password
can be changed..."

This method of changing password is not recommended
at all if you want to preserve whatever you have in the server database.
As a matter of fact, this is the way to reset the DECserver to the
original factory setting. You will definitely lose all settings that
you have set ... Services defined, port configuration etc.

According to DEC, there is currently no way that you can reset a
password if the server manager forget the password.