3300 Backdoor Action

[Devolution]

Hi Guys,

I have a Major Alarm listed in the Security category. From looking in the logs, I can see that Enterprise Manager tries to login as part of the scheduled backup process overnight and fails many times which causes the alarm.

Now I think that ENTS uses the backdoor to get the backups however I have accessed the 3300 backdoor using a known working account "Global" and have found that the Username/Password for the "System" account has been removed. So we only have three accounts listed. Two "Maint" and the Gloabal" one I used to login with. The "System" login that has been removed does still work through the ESM though. I imagine the two forms aren't linked.

Is there a way to reset this user list or re-add the "System" account?

MCD4.0SP3
ENTS 6.0.4.3

Cheers.

 

[Lundah]

The telnet interface to the 3300 uses the old SX-2000 security setup, which has 3 security levels: System, Installer, and Maintenance. The default accounts for each are: "system", "installer", "maint1", "maint2". The "display user" command is only accessible from the system-level account, but will display the logins programmed for each. The system-level account is also reset to default on a software upgrade. If you have access to the system-level telnet login, you should be able to reset any of the logins and passwords using the "reset user" and "reset password" maintenance commands via the telnet interface.

 

[LoopyLou]

Though you created an account just for OpsMAn

I'd tell you a UDP joke but I'm afraid you won't get it. TCP jokes are the best because you always get them.

 

[Devolution]

Thanks Lundah.

I can only login (via Telnet) using the Installer and Maint 1/2 profiles. The "System" level profile does not appear in the User Authorization Form. Your explanation confirms that I am not able to re-add this "System" profile.

You mentioned that a upgrade would be the procedure to get this form reset. I presume I would be able to just upgrade to the same version they are currently on?

Cheers.

 

[Lundah]

Sorry to drop off on you, been a busy week.

The telnet accounts aren't listed in User Authorization Profiles, just one of the quirks of the system.

As far as resetting the system-level telnet account, yes an upgrade to the same version or even just a backup/restore of the current database should reset the account to default, then you can telnet in and make changes. It's a very good idea to change "System" right away, since that's a pretty big security hole leaving it at the default value.