| The fast answer:
YES: if he runs console firmware 5.3 or later (what you get when you
do a >>> show config on the console), then he has got the "set
password" option in his console.
The long answer:
Two things to note:
1. He had better be running console firmware 5.5 if he is going to run
MLS+ V3.1A on that box. For the explanation, do a dir/tit=firmware
in this notesfile. He can load that firmware from the Firmware CDROM
that shipped with MLS+ V3.1A which is labelled "V3.5" (this version
number bears no relationship to the versions of firmware it contains).
He cannot use any later version of firmware, or more precisely, he
cannot use the version of firmware that he must run on the box if he is
going to run MLS+ V4.0A on that box.
2. IN ANY CASE, you cannot set or reset the console password while
running MLS+ (either V3.1A or V4.0A) because there are no hooks in the
firmware up to the OS that enable cpasswd to change the NVRAM.
Got that?
IOW, there are two issues here:
1. Whether or not the hardware (firmware) supports console password.
Yes, the MUSTANG (AlphaStation 200's) with V5.3 firmware
support "set password" at the console prompt >>>
2. If the firmware and base OS together provide a "hook" so that the
cpasswd program can set/reset the console password while the system
is booted.
NO, the MUSTANG firmware does not enable the operating system to
set/reset the console password, so the cpasswd program on MLS+
cannot be used to set/reset the console password on that box.
|
| Tammy called yesterday -- evidently JR said he had a Mustang, but from
the number on the box, AlphaStation 400/4-233, Lee says he has an
Avanti. Lee got the firmware for both the Mustang (as200) and Avanti
(as400) from the V3.5 CDROM and put them in ~ftp/firmware so that
Tammy could get them to JR.
At any rate, after much back and forth, we determined that he needs to
be able to run a later version of firmware to get the console password
support, but if he runs that later version, he will be unable to set
account passwords (using /usr/tcb/bin/passwd). At this point, since he
cannot upgrade to V4.0A (no time for him to retest his applications, he
must deliver to his customer now), this is the plan that Tammy will
give him:
1. He will install the firmware from CDROM V3.4 before he begins
installing the MLS+ V3.1A software on the system. He will then
be able to set the root password, etc., during the installation
procedure.
2. Once the system is up and installed with all his layered products
and customized with user accounts, etc., and they want to "lock
up" the system, he will install the firmware from any CDROM later
the V3.5 (which is the earliest, we think with the firmware support
for the console password in it, firmware rev 5.2-10 or later).
He will then be able to set the console password, but will be
unable to change user account passwords.
NOTE: The V3.1A SPD does not say we do not support console password in
the "car" series of Alpha processors.
|