Topics: AIX, HMC, System Admin
HMC Access & Security Issues
As of Hardware Management Console (HMC) Release 3, Version 2.3, the rexec command is no longer available on the HMC. Use
ssh command instead. From Version 2.5, users are required to enter a valid HMC user id/password when downloading the WebSM client from the HMC. The URL for the WebSM client is: http://[HMC fully qualified domain name]/remote_client.html.
Standard users receive the restriced shell via a set -r in .mysshrc when logging in. Comment the set -r command in /opt/hsc/data/ssh/hmcsshrc to get rid of the restricted shell for your users (it gets copied to $HOME/.mysshrc). For more information on commands that can be used in restriced shell on the HMC, go to HMC Power 4 Hints & Tips.
A special hscpe user ID can be created which has unrestricted shell access via the pesh command. Use lshmc -v to determine the serial number of the HMC (after *SE). Then call IBM support and request for the password of the hscpe user for the pesh command. IBM is able to generate a password for the hscpe user for one day.
If you found this useful, here's more on the same topic(s) in our blog:
- Creating an image_data resource without preserving mirrors for use with NIM
- Creating a RAM disk on AIX
- How best to configure the /etc/netsvc.conf file
- Finding files with no defined user or group
- Red Hat: Creating a backup to ISO images
Interested in learning more?




